lvl99[.]store

The domain lvl99.store is currently active and resolves to the IPv4 address 159.198.41.140. Infrastructure analysis shows the authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com, indicating registration through a generic registrar service. VirusTotal reports that 20 of 91 scanned security vendors have flagged the domain as malicious, reflecting a moderate consensus of compromise. AlienVault Open Threat Exchange lists the domain in six separate threat‑intelligence pulses, further corroborating its association with malicious activity. The available intelligence classifies the site as a generic_phishing operation, but no specific targeted brand or credential‑collection page has been disclosed publicly. Consequently, the exact phishing lure and victim profile remain uncertain. Defenders should block DNS resolution to 159.198.41.140 and add lvl99.store to URL filtering policies. Network monitoring for outbound connections to the identified IP and its hosting ASN is advised. Continuous re‑evaluation of the domain’s reputation on VirusTotal and OTX is recommended, as additional detections may emerge.