meta-outpost[.]pages[.]dev

Analysis of the domain meta-outpost.pages.dev indicates it was a credential phishing site targeting Meta users, operational under Cloudflare hosting. The domain, registered on February 21, 2026, through Cloudflare, Inc., resolved to the IP address 188.114.96.3, associated with AS13335 (Cloudflare, Inc.) in the United States. SSL certification was issued by Google Trust Services (WE1), and the site employed HSTS and HTTP/3 technologies, typical of modern phishing infrastructure leveraging Cloudflare’s security features to evade detection. As of July 25, 2026, the domain is offline, returning an HTTP 403 status with the page title 'Suspected phishing site | Cloudflare,' suggesting Cloudflare’s automated systems or manual review flagged and restricted access.

The domain appears on one security blocklist (PhishDestroy), and 15 of 93 security vendors on VirusTotal flagged it as malicious. Trust scores from Scamadviser and Gridinsoft both rated the domain at 1/100 and 0/100, respectively, reinforcing its classification as high-risk. The scam type is explicitly identified as credential phishing, though the exact content or targeting methods beyond this classification remain unconfirmed due to the domain’s current inaccessibility. Defenders should treat this domain as confirmed malicious infrastructure.

While offline, the registration and hosting details suggest potential for reuse or rebranding under similar Cloudflare Pages subdomains. Monitoring for re-emergence under the same or related nameservers (tom.ns.cloudflare.com, olga.ns.cloudflare.com) is recommended. Network-level blocking of the resolved IP (188.114.96.3) may mitigate residual risk, though Cloudflare’s shared IP space limits the precision of such measures. No evidence links this domain to broader phishing kits or campaigns beyond its credential-harvesting classification.