sp11ct-zorven-biz8-fralto-menvik[.]pages[.]dev

The domain sp11ct-zorven-biz8-fralto-menvik.pages.dev is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Cloudflare Pages, indicating the registrar is Cloudflare. Detection telemetry reveals that 14 out of 91 security vendors on VirusTotal have flagged the domain as malicious, demonstrating a moderate consensus among scanning engines.

The domain also appears on two external blocklists and is explicitly listed by PhishDestroy and OpenPhish, confirming its presence on recognized phishing mitigation feeds. These multiple independent detections suggest the domain is being used in phishing campaigns, though the specific payload or targeted brand has not been disclosed in the available intelligence. Defenders should consider the domain hostile and enforce blocking at network perimeter and endpoint controls.

Continuous monitoring of DNS queries for this exact FQDN is advised, as well as periodic re‑evaluation of its status on threat intelligence platforms, given that the current evidence is limited to blocklist listings and vendor detections. Organizations employing URL filtering should add the domain to deny lists, and security teams should alert users to avoid any unsolicited communications that reference this URL. The combination of active status, elevated risk, and corroborating blocklist entries warrants a proactive defensive posture.