sp11ct-bravik-biz8-lorpex-vansel[.]pages[.]dev

The domain sp11ct-bravik-biz8-lorpex-vansel.pages.dev is currently listed as an active phishing infrastructure with an elevated risk rating. It appears on two independent security blocklists and is explicitly blocked by PhishDestroy and OpenPhish, indicating that multiple threat intelligence feeds have observed malicious activity associated with this host. VirusTotal analysis shows that 14 out of 91 scanning engines have flagged the domain, providing additional corroboration of its malicious nature.

No publicly available data on the registrar, registration date, hosting provider, IP address, or SSL certificate details has been disclosed, so attribution of the underlying infrastructure remains limited. Likewise, the page title, brand targeting, and specific phishing kit used have not been published, leaving the exact content and victim lure uncertain. Despite these gaps, the convergence of blocklist entries and multi‑engine detections justifies a precautionary stance.

Defenders should enforce network‑level deny rules for the domain, incorporate it into URL filtering policies, and monitor DNS queries for related subdomains. Continuous re‑evaluation is recommended, as additional data such as hosting IP, TLS fingerprint, or observed payloads may emerge in future scans. Organizations that rely on web‑based authentication or handle credential entry should treat any traffic to this domain as malicious and block it at the perimeter or endpoint level.