extnsion-metasck[.]pages[.]dev

This domain, extnsion-metasck.pages.dev, was set up to trick visitors into handing over sensitive information, likely by impersonating a legitimate service or login page. It was classified as a generic phishing threat, meaning it didn't target any specific brand but used social engineering to deceive users. The site is now offline, but while active, it posed a serious risk to anyone who landed on it.

PhishDestroy's investigation found that the domain was registered on October 17, 2025 through Cloudflare, Inc., a common registrar used by malicious actors. The SSL certificate was issued by Google Trust Services (WE1), and the page title read "Suspected phishing site | Cloudflare," indicating that Cloudflare's own systems had flagged it. VirusTotal data shows that 14 out of 95 security vendors considered this domain malicious, and it appeared on one security blocklist. Google Safe Browsing also flagged it for phishing. The domain resolved to IP address 172.66.46.220.

If you visited this site, you should immediately change any passwords or credentials you may have entered, enable two-factor authentication on your accounts, run a full antivirus scan on your device, and monitor your financial accounts for unusual activity. It's also wise to report the incident to your email provider or IT department. Stay vigilant and always verify URLs before entering personal information.