dev[.]spgyvnotexistslocalhost[.]non-steam[.]com

Analysis of dev.spgyvnotexistslocalhost.non-steam.com indicates that the domain remains actively malicious as of the report date, July 21, 2026. The domain was registered on August 23, 2019 through Danesco Trading Ltd. and is hosted on Cloudflare name servers (ian.ns.cloudflare.com and rita.ns.cloudflare.com). DNS resolution points to the IP address 81.91.178.184, which is currently listed on at least one external security blocklist. The domain is flagged by PhishDestroy as a confirmed phishing resource, and VirusTotal scans show that eight out of ninety‑five security vendors have identified it as malicious. The presence on a blocklist and multiple vendor detections corroborate the high‑risk classification. No additional contextual data such as page titles, SSL certificate details, or brand targeting is available, so the precise phishing lure cannot be described beyond the generic classification. Defenders should immediately add dev.spgyvnotexistslocalhost.non-steam.com to network‑level deny lists, enforce DNS‑based blocking, and monitor traffic to the associated IP 81.91.178.184 for any anomalous connections. Continuous re‑evaluation is advised, as the domain’s active status suggests ongoing use in credential‑harvesting campaigns.