pehnavni[.]com

pehnavni.com is currently flagged as a high‑risk generic phishing site. Infrastructure analysis shows the domain resolves to the IPv4 address 103.20.234.45 and is hosted under the name‑server pair ns1.starizpk.com and ns2.starizpk.com. The domain was created on 20 September 2017 and is registered through HOSTINGER operations, UAB, indicating a commercial registrar rather than a privacy‑protect service. VirusTotal reports that 20 of 91 security vendors have flagged the domain, and AlienVault OTX lists the domain in six separate threat‑intel pulses, demonstrating recurring detection across independent platforms. The domain’s mail exchanger points to pehnavni.com itself, a configuration often observed in phishing campaigns to facilitate spoofed email delivery. Although the precise payload or credential‑harvesting page has not been publicly disclosed, the combination of multi‑vendor detections, repeated OTX mentions, and the active status of the domain suggests an operational phishing infrastructure. Defenders should block network resolution to 103.20.234.45, monitor for outbound traffic to the domain, and add the domain to email filtering deny lists. Continuous re‑scanning is recommended to capture any changes in malicious content or additional vendor detections.