shivlpf[.]shop

Analysis indicates that the domain shivlpf.shop is actively hosting a phishing site identified by the page title “Lumitek”. The site presents a valid HTTPS certificate issued by Let’s Encrypt (identifier YE2) and returns HTTP 200 responses, suggesting the content is reachable. DNS resolution points to the IP address 72.62.195.74, which is hosted by Hostinger in Malaysia. The same IP has been listed on at least one public security blocklist and the domain is currently blocked by the PhishDestroy sinkhole. Threat intelligence feeds reference the domain in five AlienVault OTX pulses, and VirusTotal reports that 20 of 91 scanned scanners flag the domain as malicious. The domain’s risk rating is high and its status remains active as of the report date. While the page title “Lumitek” provides the only visible indication of the impersonated entity, no additional content analysis is available, leaving the exact phishing lure unclear. Defenders should block network resolution to 72.62.195.74, add shivlpf.shop to URL filtering policies, and monitor for related activity in host‑based and email security solutions. Continuous re‑evaluation is advised, as further content or credential‑capture mechanisms may be revealed.