meta-solsticex[.]pages[.]dev

Analysis of meta-solsticex.pages.dev indicates that the domain is being used for a high‑risk crypto‑related phishing operation. The site is hosted on Cloudflare infrastructure, resolving to IP address 172.66.44.167, which is associated with AS13335 Cloudflare, Inc. in the United States. The SSL certificate presented is issued by Google Trust Services under the WE1 designation, confirming the use of a valid TLS layer despite malicious intent. HTTP requests return a 403 status code, and the page title displayed by the server is "Suspected phishing site | Cloudflare," suggesting that the content has been taken offline or blocked by Cloudflare’s protective mechanisms.

The domain was created on September 02, 2020 and is registered through Cloudflare, Inc., with nameservers adi.ns.cloudflare.com and karl.ns.cloudflare.com. Reputation data shows a Gridinsoft trust score of 0 out of 100, indicating extreme distrust. VirusTotal has recorded 15 detections out of 93 security vendors, reinforcing the malicious classification. The domain appears on three independent security blocklists and is specifically listed by PhishDestroy, MetaMask, and SEAL as a blocked entity.

Detected technologies include HSTS, Cloudflare, and HTTP/3, confirming modern web protocol usage. While the exact phishing payload or targeted brand is not disclosed in the available data, the classification as a crypto scam aligns with the observed indicators. Defenders should block the domain at the network perimeter, update endpoint and DNS filtering policies, and monitor for any related indicators of compromise tied to the IP address or Cloudflare‑hosted assets. Continuous observation of the domain’s status is advised, as the current offline state may be temporary and could be re‑activated by the threat actor.