crowspangle-nfky6p[.]stormkit[.]dev

The domain crowspangle-nfky6p.stormkit.dev is currently active and resolves to the IPv4 address 91.98.218.209. No authoritative name servers could be retrieved, indicating that the domain’s DNS configuration is either hidden or not publicly resolvable through standard queries. The only concrete indicator associated with the domain is its classification as a generic_phishing threat, which places it in the category of credential‑stealing operations. No additional metadata such as page titles, brand references, or malware kit identifiers have been disclosed, and no public scans have been reported, leaving the content of the site unverified. Infrastructure analysis shows a single IP endpoint, which may be shared among other malicious domains, a pattern frequently observed in low‑cost phishing hosting services. Because the domain is flagged as active and under investigation, defenders should block any outbound connections to 91.98.218.209, add the domain to web‑filter deny lists, and monitor DNS queries for similar sub‑domains under stormkit.dev. Continuous observation for changes in DNS records, HTTP responses, or new detections is recommended to adjust mitigation actions as the threat evolves.