meta-vault-dhs[.]pages[.]dev

The domain meta-vault-dhs.pages.dev has been assessed as a high-risk, generic phishing site. This evaluation is based on multiple indicators and intelligence sources, confirming its malicious intent and potential to compromise user data and systems.

Analysis indicates that the domain was registered through Cloudflare, Inc. on October 07, 2025. VirusTotal reports that 17 out of 95 security vendors have flagged this domain as malicious, underscoring the consensus among security experts. The domain resolves to the IP address 172.66.45.31, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The page title, 'Suspected phishing site | Cloudflare,' aligns with the threat categorization. Google Safe Browsing has also identified the domain as a phishing site, and it has been blocked by PhishDestroy and PhishingDB, appearing on two known security blocklists. The SSL certificate is issued by Google Trust Services / WE1, which may contribute to a false sense of security among users. The domain is currently offline, but the infrastructure and historical data remain concerning.

To mitigate the risks associated with this phishing site, organizations and individuals are advised to block the domain and IP address 172.66.45.31 in their network security configurations. Security teams should monitor for any resurgence of the domain and apply additional layers of protection, such as implementing phishing-awareness training for employees and deploying advanced phishing detection tools. Additionally, users should avoid clicking on any links or providing personal information on any page with a similar domain structure, as these may be part of a larger phishing campaign.