companionshipfulfilled[.]shop

Analysis indicates that companionshipfulfilled.shop is an active phishing domain registered on June 12, 2026, through Namecheap, Inc. The domain is currently resolving to 172.67.189.30, a Cloudflare IP address located in Canada, and is using Cloudflare nameservers (megan.ns.cloudflare.com, merlin.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites leveraging Cloudflare infrastructure. The domain is flagged by at least one security blocklist and appears in four AlienVault OTX threat intelligence pulses, suggesting prior malicious activity or associations. VirusTotal reports that 5 out of 91 security vendors detect this domain as malicious, though the specific nature of the threat remains unconfirmed due to the absence of visible content. The HTTP status code 301 and the page title 'companionshipfulfilled.shop | 523: Origin is unreachable' indicate the site may be misconfigured or intentionally obfuscating its backend, a tactic observed in phishing campaigns to evade detection. Infrastructure analysis reveals the use of Cloudflare services, which are frequently employed to mask the true origin of malicious domains. The domain's trust score is 0/100, reinforcing its high-risk classification. While the exact target or brand impersonation is not yet determined, the domain's name suggests a potential social engineering lure related to personal services or relationships. Defenders should treat this domain as high-risk and consider blocking it at the network level. Further investigation into associated IP ranges, certificate transparency logs, and historical DNS records may provide additional context. Monitoring for changes in HTTP status or page content is recommended, as the domain may transition from an unreachable state to an active phishing page.