sp11ct-talvor-biz8-prenko-lisvek[.]pages[.]dev

Analysis of sp11ct-talvor-biz8-prenko-lisvek.pages.dev shows that the domain is currently listed on multiple phishing‑related blocklists. Both PhishDestroy and OpenPhish have added the domain to their watchlists, indicating that it is being used to host credential‑stealing content. The domain also appears on two additional security blocklists, although the specific list names are not disclosed. VirusTotal scans report that 14 of 91 anti‑malware engines flag the domain as malicious, which aligns with the blocklist observations.

No public information about the registrar, registration date, hosting provider, ASN, or geographic location has been released, and the site’s SSL certificate details, HTTP response codes, or page title have not been published in the available intelligence. Consequently, the full infrastructure footprint of the domain remains uncertain. Defenders should treat any traffic to sp11ct-talvor-biz8-prenko-lisvek.pages.dev as potentially hostile.

Recommended mitigations include adding the domain to DNS‑based deny lists, updating web proxy and firewall rules to block HTTP and HTTPS requests, and ensuring endpoint protection solutions are configured to honour the VirusTotal detections. Organizations should also monitor for any future reputation changes, as additional analysis may reveal hosting details or associated phishing campaigns. Until further evidence is gathered, the domain should be considered high‑risk for credential harvesting attempts.