shapes[.]vc

shapes.vc was registered on October 6 2025 through NameCheap, Inc. The authoritative nameservers are kianchau.ns.cloudflare.com and leia.ns.cloudflare.com, both pointing to Cloudflare’s network. DNS resolution returns the IPv4 address 172.67.214.71, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. No TLS certificate is presented for the host, indicating that the site was served over plain HTTP at the time of observation. The only visible page element is the HTML title tag containing the word “Shapes”. No additional content or branding information has been identified, and the page has not been analyzed for visual mimicry.

Static analysis on VirusTotal shows that 1 of 95 scanned security vendors flagged the domain, suggesting a detection but without detailed classification. The Gridinsoft trust score is 0 out of 100, reinforcing the low reputation. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service, confirming its classification as a phishing infrastructure. Current operational status is offline, which may be temporary or a takedown response.

Nevertheless, the infrastructure footprint—registration via a low‑cost registrar, use of Cloudflare DNS, and lack of TLS—matches known patterns for abusive phishing sites. Defenders should continue to deny any outbound connections to 172.67.214.71, add shapes.vc to internal URL filtering and DNS blocklists, and monitor the registrar for any re‑registration activity. Because the domain is hosted on shared Cloudflare infrastructure, collateral impact on other tenants is unlikely, but any future resolution to the same IP should be re‑evaluated. Ongoing threat‑intel feeds should be consulted for updates, and any alerts triggered by users attempting to access the domain should be investigated as potential credential‑phishing attempts.