sp10ct-lorev-biz8-kurek-zamin[.]pages[.]dev

The domain sp10ct-lorev-biz8-kurek-zamin.pages.dev is listed as active and assigned an elevated risk rating as of August 03, 2026. Intelligence sources indicate that the site is being used for a generic phishing campaign. It has been added to the PhishDestroy and OpenPhish blocklists, and appears on two additional security blocklists referenced by the reporting platform. VirusTotal analysis shows that 18 of 91 antivirus and URL‑reputation engines return a positive detection for malicious activity, confirming that a significant minority of scanners identify the domain as hostile.

No further technical details such as registrar, hosting IP, SSL certificate status, or page title have been released publicly, so the underlying infrastructure remains opaque. Consequently, defenders cannot attribute the domain to a specific hosting provider or geographic region, and cannot verify whether the site employs HTTPS or presents a valid certificate. The lack of publicly disclosed page content means that the exact phishing lure (e.g., credential harvesting for a particular brand) cannot be confirmed at this time. Given the confirmed blocklist entries and the VirusTotal detection rate, security teams should immediately add the domain to URL filtering and DNS sinkhole rules, enforce strict outbound traffic controls to prevent accidental connections, and monitor network logs for any attempted accesses.

Continuous re‑scanning of the domain is recommended, as threat actors frequently modify page content or relocate the payload. Organizations should also educate end users about the risk of unsolicited links that resolve to obscure subdomains under the pages.dev namespace, reinforcing the policy to verify URLs before entering credentials. Until additional forensic evidence is released, the domain should be treated as malicious and blocked across all protective layers.