hollow-shore[.]pages[.]dev

Analysis of the domain hollow-shore.pages.dev shows multiple indicators consistent with credential phishing activity. The site is hosted behind Cloudflare infrastructure, employing HSTS and HTTP/3, and resolves to the IPv6 address 2606:4700:310c::ac42:2f8a, which belongs to AS13335 (Cloudflare, Inc.) in the United States. The domain was created on September 02, 2020 and is registered through Cloudflare, Inc., using the nameservers adi.ns.cloudflare.com and karl.ns.cloudflare.com. An SSL certificate issued by Google Trust Services (WE1) is present, and the page title returned by the server is "Suspected phishing site | Cloudflare".

HTTP requests receive a 403 status code, and the current operational status is listed as offline, suggesting the site has been taken down. VirusTotal data indicate that 15 of 93 security vendors have flagged the domain, and it appears on at least one external security blocklist. PhishDestroy has also recorded the domain as blocked. The Gridinsoft trust score is 0 out of 100, reinforcing the low trust assessment.

While the offline status limits immediate exposure, the combination of a credential phishing classification, active blocklist entries, and vendor detections warrants continued monitoring. Defenders should add the domain and its associated IPv6 address to deny lists, enforce outbound DNS filtering for the domain, and watch for any re‑registration attempts or related subdomains. Ongoing scrutiny of Cloudflare‑hosted assets linked to this identifier is recommended to mitigate potential resurgence.