home-meta-ext-ogiin[.]pages[.]dev

Analysis on July 24, 2026 indicates that the domain home-meta-ext-ogiin.pages.dev was created on February 21, 2026 and is currently offline, returning HTTP 403. The site presented the page title “Suspected phishing site | Cloudflare”. VirusTotal records show 12 of 93 scanners flagged the domain, suggesting a moderate level of detection across anti‑malware engines. Google Safe Browsing classifies the URL as a social engineering threat, and the domain appears on a single public blocklist, with PhishDestroy explicitly blocking it. The hosting is provided by Cloudflare, Inc., using the IP address 172.66.44.250 belonging to AS13335 in the United States.

TLS is delivered by Google Trust Services under the WE1 certificate, and the site enforces HSTS while supporting HTTP/3. Nameservers elijah.ns.cloudflare.com and sharon.ns.cloudflare.com resolve the domain. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The risk rating is high and the identified scam type is credential phishing. No additional evidence such as payload samples or landing page screenshots is available because the site is offline.

Consequently, defenders should continue to block the domain at network perimeter and endpoint layers, monitor for any re‑hosting attempts, and consider adding the IP address to deny lists. Ongoing observation of the associated Cloudflare nameservers and the blocklist entries is recommended to catch potential repurposing. Because the domain was registered through Cloudflare, further investigation into other domains sharing the same nameservers may reveal related infrastructure. Until a new instance is observed, the current evidence supports a high‑confidence classification as a credential‑phishing host.