get-metmskextension-auth[.]pages[.]dev

The domain get-metmskextension-auth.pages.dev has been identified as a high-risk credential theft threat. This site was likely designed to impersonate legitimate services, tricking users into submitting sensitive information such as login credentials. Such tactics can lead to unauthorized access to personal accounts, financial loss, and identity theft. The domain's configuration suggests a targeted effort to mimic trusted entities, thereby increasing the likelihood of deception.

Technical scrutiny reveals substantial evidence supporting the classification of this domain as malicious. Registered through Cloudflare, Inc., the domain was created on October 27, 2025, and is hosted on IP address 172.66.46.250, associated with AS13335 Cloudflare, Inc. Detection platforms have responded to this threat; VirusTotal indicates that 13 out of 95 security vendors flagged the domain as malicious. It has also been identified by Google Safe Browsing as a phishing site and appears on one security blocklist. These findings underscore the potential for significant harm to users who engage with this site.

For individuals who may have visited this domain, immediate action is recommended. Users should change their passwords on any accounts that could have been compromised and monitor financial statements for unauthorized activity. Implementing multi-factor authentication can provide additional security. It is crucial to remain vigilant and skeptical of unsolicited requests for sensitive information to mitigate the risk posed by such phishing attempts.