meta-blade-2n4[.]pages[.]dev

meta-blade-2n4.pages.dev is currently listed as a credential‑phishing site. The domain was registered on February 21 2026 through Cloudflare, Inc., and it resolves to the Cloudflare edge address 172.66.47.131, which belongs to AS13335 in the United States. Both authoritative nameservers are Cloudflare‑provided (vicky.ns.cloudflare.com and evelyn.ns.cloudflare.com), and the site presents a Google Trust Services WE1 certificate, indicating that TLS termination is performed by Cloudflare. An HTTP request returns status 403, and the page title returned by the server is "Suspected phishing site | Cloudflare", which is a default block page displayed when Cloudflare disables the site. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy.

VirusTotal analysis shows that 14 of 95 scanning engines have flagged the domain, reinforcing the malicious classification. Independent reputation services assign extremely low scores (Scamadviser 1/100, Gridinsoft 0/100), and automated technology detection reports the presence of HSTS, Cloudflare routing, and HTTP/3 support. The presence of the domain on only one public blocklist suggests limited exposure, yet the low reputation scores and multiple vendor detections indicate a high likelihood of malicious intent. The combination of Cloudflare‑managed DNS, a Google‑issued TLS certificate, and the default 403 response is typical of domains that have been seized or taken down after abuse.

The risk level has been assigned as elevated, reflecting the credential‑phishing classification despite the current offline status. Because the site is offline, the exact phishing payload or targeted brand cannot be confirmed, and no screenshots or form details are available. Defenders should add the domain and its associated IP address to block lists, monitor for any future re‑hosting on other Cloudflare‑controlled IPs, inspect recent DNS queries for the domain within their networks, and enforce DNS‑based filtering.