compassionashenstar[.]shop

Analysis of the domain compassionashenstar.shop indicates active credential phishing infrastructure as of July 12, 2026. The domain was registered on June 12, 2026, through Namecheap, Inc., and currently resolves to the IP address 104.21.41.192, associated with Cloudflare, Inc. in Canada. The domain utilizes Cloudflare nameservers (lauryn.ns.cloudflare.com and lochlan.ns.cloudflare.com) and employs HTTP/3 with a Let's Encrypt SSL certificate (identifier E8). A 301 HTTP status is observed, though the page title displays 'compassionashenstar.shop | 523: Origin is unreachable,' suggesting potential misconfiguration or intentional obfuscation of the backend server. Threat intelligence platforms have flagged this domain in multiple instances: it appears in four AlienVault OTX pulses and is detected by seven of 91 security vendors on VirusTotal. Additionally, the domain is listed on one security blocklist and is actively blocked by PhishDestroy. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its classification as high-risk. While the specific target or brand impersonation remains unconfirmed due to the lack of accessible page content, the domain is explicitly categorized as credential phishing. Defenders should treat this domain as malicious and implement blocking measures at the DNS or network level. Given its recent registration and use of Cloudflare, monitoring for changes in resolution or SSL certificate updates may aid in tracking its evolution. Further analysis of the phishing kit or backend infrastructure is not possible with the current data, but the domain's active status and detection history warrant immediate mitigation.