sp11ct-favlor-biz8-kersan-movrik[.]pages[.]dev

Analysis dated August 03, 2026 indicates that the domain sp11ct-favlor-biz8-kersan-movrik.pages.dev is currently active and has been classified as a generic phishing site with an elevated risk rating. The domain is hosted on Cloudflare Pages, as indicated by the registrar information, which provides a content‑delivery network but does not reveal the underlying server IP address. Independent threat‑intelligence feeds have added the domain to two blocklists, specifically PhishDestroy and OpenPhish, confirming that it is recognized by multiple anti‑phishing services.

VirusTotal scans show that 14 out of 91 security vendors submitted a malicious verdict, reinforcing the likelihood of phishing behavior. No additional public data such as Safe Browsing status, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page title have been disclosed, leaving those aspects unverified at this time. Defenders should continue to block the domain at perimeter firewalls and DNS resolvers, add it to local deny lists, and monitor for any outbound connections from internal hosts.

Incident response teams should treat any credential or payment information submitted to URLs under this domain as compromised and advise affected users to reset credentials. Ongoing observation is recommended to capture any future changes in hosting or content that could alter the threat profile.