shapes[.]asia

The domain shapes.asia is presently offline, yet the historical data collected during its brief activity indicates a malicious phishing infrastructure. Registration details show the domain was created on February 21, 2026 through NameCheap, Inc. DNS resolution points to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. No TLS certificate was presented during the scan, meaning any HTTP traffic would have been unencrypted. The only visible page element is the title “Shapes — Empowering the brave”, and no further page content has been disclosed for analysis.

VirusTotal recorded four detections out of ninety‑three scanning vendors, confirming that some security products have identified the domain as malicious. Independent blocklist monitoring shows the domain appears on three security blocklists, and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score is 0 out of 100, reflecting a classification of fully untrusted. Nameserver records use ignacio.ns.cloudflare.com and katja.ns.cloudflare.com, consistent with the Cloudflare hosting environment.

The evidence collectively points to a generic phishing operation, but the specific target brand or credential‑harvesting technique remains unknown because the page content has not been captured. Given the elevated risk rating, defenders should enforce DNS‑level denial for shapes.asia, add the associated IP address to network reputation blocks, and monitor for any future re‑registration or activation. Additional collection of HTTP payloads, redirects, and any associated command‑and‑control endpoints would be required to complete the threat profile. Until further indicators appear, the domain should be treated as a confirmed phishing source and blocked across all security layers.