sp11ct-zavdok-biz8-pralor-kesvik[.]pages[.]dev

The domain sp11ct-zavdok-biz8-pralor-kesvik.pages.dev is active and has been classified as a generic phishing infrastructure. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain, indicating that multiple detection engines have identified malicious behavior. The domain is actively blocked by the PhishDestroy and OpenPhish blocklists and appears on two additional public blocklists, reinforcing its reputation as a hostile resource.

No public Safe Browsing verdict, OTX entry, registrar information, IP/hosting details, SSL certificate data, HTTP status code, trust score, or page‑title metadata are present in the current intelligence set, leaving those attributes unverified at this time. Because the available evidence is limited to vendor detections and blocklist listings, defenders should assume the domain is malicious and take immediate mitigation steps. Recommended actions include adding the full FQDN to internal DNS blocklists, configuring firewalls or proxy filters to deny outbound connections, monitoring DNS query logs for any lookups, and updating external threat‑intelligence feeds with the indicator.

Continuous re‑evaluation of VirusTotal and sandbox analyses is advised to capture any evolution of payloads or hosting changes. Given its presence on multiple vendor feeds and blocklists, the likelihood of malicious intent is elevated, and proactive blocking is warranted.