zjstr9agpxonl-qcfzk65kmja-2e6f0b-skr3c[.]pages[.]dev

The domain zjstr9agpxonl-qcfzk65kmja-2e6f0b-skr3c.pages.dev is currently classified as an active generic phishing infrastructure with an elevated risk rating. Infrastructure analysis shows the hostname is hosted on Cloudflare Pages, a service that provides static site hosting and automatically provisions a CDN front‑end. DNS resolution returns the IPv6 address 2a06:98c1:3121::3, confirming the domain is live on Cloudflare’s edge network.

The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one external threat‑intel source has taken remediation action against it. VirusTotal scans report that 16 of 91 security vendors have generated a detection for this domain, reinforcing the suspicion of malicious activity. No public page title, brand target, or phishing kit information is presently available, and the content of the site has not been directly analyzed.

Consequently, the exact phishing lure (e.g., credential harvesting page) remains unknown. Defenders should treat the domain as hostile: incorporate the IPv6 address and fully qualified domain name into DNS sinkhole or firewall deny lists, monitor outbound connections for attempts to resolve or contact the host, and consider adding the domain to internal blocklists used by web proxies and email gateways. Continuous re‑evaluation is advised, as additional detections or content analysis may surface further indicators of compromise.