meta-station[.]pages[.]dev

The domain meta-station.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 172.66.47.101 located in the United States under ASN 13335. The TLS certificate presented is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint. HTTP responses return a 403 status code, and the page title reported by scanners reads "Suspected phishing site | Cloudflare". Industry-grade scanners have flagged the host: sixteen of ninety-five VirusTotal engines label it malicious, and it appears on at least one public phishing blocklist. Additional intelligence sources include a block by PhishDestroy, a Google Safe Browsing designation for social-engineering, a Scamadviser trust score of 1/100, and a Gridinsoft score of 0/100.

The site employs standard Cloudflare services such as HSTS and HTTP/3, and its authoritative nameservers are asa.ns.cloudflare.com and elmo.ns.cloudflare.com. Analysis indicates that the domain is being used for credential‑phishing, consistent with the "Credential Phishing" classification in the source data. The combination of a low trust rating, multiple vendor detections, and active blocklist listings suggests a high probability of malicious intent. However, the current HTTP 403 response and the offline status reported by the monitoring platform limit visibility into the exact payload or victim‑targeting mechanisms, leaving the specific luring page content unknown.

Defenders should treat any traffic to meta-station.pages.dev as hostile. Immediate actions include adding the domain and its resolved IP to outbound deny lists, confirming that DNS resolvers block the associated nameservers, and ensuring that web-gateway filters reference the Google Safe Browsing and PhishDestroy feeds. Continuous monitoring of Cloudflare-issued certificates for this hostname is advised, as attackers may rotate certificates or shift hosting while retaining the same domain.