metana-sync[.]pages[.]dev

The domain metana-sync.pages.dev was registered through Cloudflare, Inc. on February 21 2026 and is hosted on Cloudflare’s edge network (AS13335) with the IP address 172.66.45.28 located in the United States. DNS resolution is served by the authoritative nameservers leo.ns.cloudflare.com and amanda.ns.cloudflare.com. When accessed, the site returns an HTTP 403 status and presents the page title “Suspected phishing site | Cloudflare”, indicating that Cloudflare has flagged the content as malicious. The SSL certificate is issued by Google Trust Services under the WE1 label, confirming the use of a valid TLS chain. Multiple security services have identified the domain as malicious.

VirusTotal reports that 15 of 93 scanning engines flag the host, and Google Safe Browsing classifies it as a social‑engineering threat. The domain appears on a single external blocklist and is explicitly blocked by PhishDestroy. Reputation services assign extremely low trust scores: Gridinsoft rates it 0 out of 100 and Scamadviser 1 out of 100. The listed scam type is credential phishing, suggesting attempts to harvest login credentials. Infrastructure analysis shows the site leverages Cloudflare’s security features, including HTTP/3 and HTTP Strict Transport Security (HSTS).

No additional technology stacks or third‑party services were observed beyond the Cloudflare edge. The current operational status is “offline”, which may indicate that the phishing page has been taken down or is being rotated. Uncertainties remain regarding the specific target brand or the exact phishing payload, as the page content has not been captured. Analysts should continue to monitor DNS queries for the domain and its associated IP, enforce blocklist rules in perimeter defenses, and consider adding the domain to internal URL filtering policies.