sp0ct0-surnex-biz-kavtri-molza[.]pages[.]dev

The domain sp0ct0-surnex-biz-kavtri-molza.pages.dev was registered on June 08, 2026 through Cloudflare Pages and is currently listed as active. It has been added to a single security blocklist and was explicitly blocked by the PhishDestroy service. VirusTotal observations show that 11 of 91 scanning engines have flagged the domain, indicating a moderate level of consensus among automated malware and URL reputation tools that the site is malicious.

No additional intelligence such as a page title, SSL certificate details, hosting IP address, ASN, or country of operation is available in the supplied data, leaving the exact infrastructure footprint and any potential content undisclosed. The absence of a known impersonated brand means the threat is classified as generic phishing, targeting users with a likely credential‑harvesting or credential‑validation flow. Defenders should treat the domain as hostile: add it to URL filtering rules, block it at network perimeter appliances, and ensure endpoint protection suites that rely on URL reputation ingest the blocklist entry.

Continuous monitoring of VirusTotal and other threat‑intel feeds is recommended, as additional detections may emerge that reveal the underlying phishing kit or target brand. Organizations that employ email security gateways should also consider adding the domain to deny‑list policies to prevent malicious links from reaching end‑users. Given the recent creation date and the early detection by multiple vendors, the domain should be regarded as a fresh threat actor infrastructure that may be leveraged for broader campaigns if not contained promptly.