holmstead-bakehouse[.]pages[.]dev

PhishDestroy identifies holmstead-bakehouse.pages.dev as an active fake login page designed to harvest user credentials. This Cloudflare Pages deployment impersonates a legitimate bakery site to trick visitors into submitting login details that are immediately exfiltrated to attacker-controlled servers. The domain was registered through Cloudflare, Inc. and resolves to IP 172.66.47.64 with a Let's Encrypt SSL certificate to appear trustworthy.

This domain has not yet been flagged by VirusTotal or any public blocklists, scoring 0 detections out of 95 scanners. Cloudflare Pages hosting and Let's Encrypt certificates are frequently abused by threat actors to rapidly deploy convincing phishing infrastructure while maintaining short operational windows. The lack of detections indicates a newly active campaign that evades traditional signature-based detection.

If you visited holmstead-bakehouse.pages.dev and entered any login credentials, immediately change those passwords on a clean device and enable multi-factor authentication where available. Scan your system with updated antivirus software and consider revoking any session tokens or API keys that may have been exposed. Report this domain to PhishDestroy to help protect the broader community from this emerging threat.