brave-pine-189[.]allcompredirectportalshare[.]workers[.]dev

Analysis of the domain brave-pine-189.allcompredirectportalshare.workers.dev indicates that it was created on February 08, 2019 and is hosted via Cloudflare Workers infrastructure. DNS resolution points to the IP address 188.114.96.3, which is part of Cloudflare's network and does not reveal a dedicated backend server. VirusTotal has processed the domain and 10 of 91 scanning engines returned a malicious classification, supporting its identification as a phishing resource.

The domain is currently listed on one public security blocklist and is actively blocked by the PhishDestroy service, confirming that defensive feeds consider it hostile. No public information is available regarding the site’s TLS certificate, HTTP response codes, or page content; the page title and any brand targeting have not been published in the intelligence set. Consequently, the exact payload or credential‑harvesting technique remains unknown.

Defenders should add the domain and its associated IP address to network‑level deny lists, ensure that DNS filtering solutions block queries to the full domain, and monitor for any outbound connections to the Cloudflare IP range that may indicate compromised client activity. Given the elevated risk level, organizations should treat any interaction with the domain as malicious and quarantine related email artifacts. Continuous re‑evaluation is advised, as the infrastructure could be repurposed or expanded, and additional detections may emerge from future scans.