quiet-hollow[.]pages[.]dev

quiet-hollow.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and uses the Cloudflare‑provided authoritative nameservers sandy.ns.cloudflare.com and elliott.ns.cloudflare.com. DNS resolution points to IP 172.66.44.164, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. An HTTP request returns status code 403 and the page title is “Suspected phishing site | Cloudflare”, indicating that the host has been taken offline and is being served by Cloudflare’s generic block page. The site presents a Google Trust Services / WE1 SSL certificate, confirming TLS termination at Cloudflare.

Reputation services assign extremely low scores: Gridinsoft rates the domain 0/100 and Scamadviser 1/100. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy. VirusTotal analysis shows that 16 of 95 scanned security vendors flagged the domain, supporting the classification as credential phishing.

The evidence collectively points to an active credential‑phishing infrastructure that has already been mitigated by the hosting provider. Uncertainty remains regarding the specific phishing payload and targeted brands, as the page content has not been captured. Defenders should continue to block the domain at network borders, monitor for any re‑registration attempts, and incorporate the observed IP and certificate fingerprints into threat‑intelligence feeds.