dravor-qunix-a17db5-thjj-z2406adv[.]pages[.]dev

The domain dravor-qunix-a17db5-thjj-z2406adv.pages.dev is currently flagged as an active generic phishing infrastructure. According to the threat feed, the domain has been blocked by the PhishDestroy filtering service and is listed on a single security blocklist, indicating that at least one reputable sinkhole or reputation provider has observed malicious activity. VirusTotal reports that 10 of 91 scanned security vendors have raised detections against the domain, confirming that multiple independent engines consider the host malicious.

No additional public intelligence—such as Safe Browsing verdicts, Open Threat Exchange reports, registrar details, hosting IP, ASN, SSL certificate information, HTTP response codes, or page‑title metadata—has been disclosed. Consequently, the extent of the phishing campaign, the targeted brand, and the payload delivery mechanisms remain unknown. Defenders should treat any traffic to or from this domain as hostile.

Immediate mitigation steps include adding the fully qualified domain name to outbound deny lists, enforcing DNS‑based blocking at the recursive resolver, and updating intrusion‑detection signatures that reference the observed host. Continuous monitoring of threat‑intelligence feeds for further context—such as additional blocklist appearances, payload samples, or victim reports—is recommended to refine response actions as the investigation progresses.