sp11ct-lorzen-biz8-mexdor-vantri[.]pages[.]dev

Analysis indicates that the domain sp11ct-lorzen-biz8-mexdor-vantri.pages.dev is currently active and has been identified by multiple phishing detection feeds. The domain appears on two public blocklists and is actively blocked by PhishDestroy and OpenPhish. VirusTotal scans show that 13 of 91 antivirus engines have generated detections for the domain, providing a moderate confidence level that the site is malicious.

No registrar, hosting IP, ASN, SSL certificate, or HTTP status information is present in the available intelligence, and Safe Browsing or OTX entries have not been observed. The page title and content have not been captured by automated crawlers, leaving the specific visual or brand impersonation unknown. Given its presence on reputable blocklists and the VirusTotal detections, defenders should treat the domain as hostile.

Recommended mitigations include adding the domain to network deny lists, configuring web proxies to block HTTP(S) traffic to the domain, and ensuring endpoint security signatures are up‑to‑date. Continuous monitoring of threat‑intel sources for new indicators such as IP resolution changes or SSL fingerprint updates is advised. User awareness training should emphasize caution with unsolicited links that may resolve to this domain, even though a targeted brand has not been disclosed.