sp12ct-homvik-biz-zolrek-farsen[.]pages[.]dev

The domain sp12ct-homvik-biz-zolrek-farsen.pages.dev is currently classified as a generic phishing site with an elevated risk rating and remains active as of the report date, August 03, 2026. Intelligence sources indicate that the domain is listed on two security blocklists and has been explicitly blocked by both PhishDestroy and OpenPhish, confirming its presence on reputable anti‑phishing feeds. VirusTotal analysis shows that 13 out of 91 antivirus and URL‑reputation engines have flagged the domain, providing independent corroboration of malicious intent.

Registration information reveals that the domain is hosted on Cloudflare Pages, a service often leveraged to obscure the true infrastructure behind malicious URLs. No additional data such as IP address, SSL certificate details, HTTP response codes, or page title have been disclosed in the available intelligence, leaving those aspects unverified at this time.

Defenders should prioritize adding sp12ct-homvik-biz-zolrek-farsen.pages.dev to DNS and URL filtering policies, monitor for any traffic to the associated Cloudflare Pages endpoint, and consider employing threat‑intelligence feeds that include PhishDestroy and OpenPhish to ensure timely updates. Continuous observation is advised to detect any future changes in hosting, payload delivery, or victim targeting that could expand the impact of this phishing infrastructure.