sp11ct-dolvar-biz8-kresik-lunmer[.]pages[.]dev

The domain sp11ct-dolvar-biz8-kresik-lunmer.pages.dev is currently classified as a generic phishing infrastructure and remains active as of the report date, August 03, 2026. Intelligence indicates the domain appears on two independent security blocklists and has been explicitly blocked by the PhishDestroy and OpenPhish feeds, confirming its inclusion in established anti‑phishing collections. VirusTotal analysis shows that 14 of 91 participating security vendors have generated detections for the domain, demonstrating that a measurable subset of scanning engines recognize malicious activity associated with the host. The elevated risk rating reflects this multi‑engine detection consensus and the domain’s presence on curated blocklists.

No additional technical artifacts such as IP address, autonomous system number, hosting provider, SSL certificate details, or HTTP response codes have been disclosed in the current intelligence set, limiting deeper infrastructure profiling at this stage. Likewise, the page title, brand targeting, or specific phishing kit information have not been released, so the exact victim lure remains undetermined. Defenders should prioritize immediate containment by adding the fully qualified domain name to network egress filters, DNS blocklists, and endpoint protection deny lists.

Ongoing monitoring of the domain’s resolution patterns and any future VirusTotal submissions is advised to capture potential changes in detection coverage. Correlation with other observed indicators of compromise, such as email subjects or attachment hashes, may reveal broader campaign activity. The current evidence base, while limited to blocklist entries and partial vendor detections, is sufficient to justify proactive blocking and heightened alerting for any traffic directed to this domain.