meta-continuum-dm1[.]pages[.]dev

This domain, meta-continuum-dm1.pages.dev, was first observed on February 21, 2026 and is hosted on Cloudflare’s network (AS13335). DNS resolution points to 172.66.44.251, an IP address owned by Cloudflare, Inc. The site presents a Cloudflare‑issued SSL certificate signed by Google Trust Services (WE1), and the HTTP response returns a 403 status code. The page title returned by the server is “Suspected phishing site | Cloudflare,” indicating that the content has been taken down or flagged by Cloudflare’s abuse mechanisms. Threat intelligence indicates the domain is being used for credential phishing; it is listed on at least one public blocklist and has been blocked by the PhishDestroy service.

Google Safe Browsing classifies the URL as a social‑engineering threat, and VirusTotal records show that 16 of 93 scanning engines have flagged the domain as malicious. Additional reputation data includes a Gridinsoft trust score of 0 out of 100 and a single blocklist appearance. The hosting environment advertises HSTS, Cloudflare services, and HTTP/3 support, confirming the use of modern security features despite the malicious intent. The domain’s registrar information lists Cloudflare, Inc. as the registration entity, and the authoritative nameservers are melnicoff.ns.cloudflare.com and heidi.ns.cloudflare.com.

Current status is offline, limiting immediate interaction but preserving forensic evidence. Uncertainty remains regarding the specific credential collection site or the exact phishing kit employed, as no payload or landing‑page details have been disclosed. Defensive recommendations include adding the domain to local deny lists, ensuring proxy and DNS filtering solutions block both the primary domain and its resolved IP, and monitoring for any re‑registration attempts.