sp11ct-velnor-biz8-prasik-lomzer[.]pages[.]dev

The domain sp11ct-velnor-biz8-prasik-lomzer.pages.dev is currently active and classified as a generic phishing site with an elevated risk rating as of August 03, 2026. Analysis shows that the domain was registered through Cloudflare Pages, indicating that the underlying hosting infrastructure is provided by Cloudflare’s edge network. VirusTotal has recorded 14 detections out of 91 security vendors, confirming that multiple independent scanners have identified malicious characteristics associated with the domain. The same domain appears on two external blocklists, specifically PhishDestroy and OpenPhish, both of which are widely used by security appliances to enforce URL filtering.

These listings reinforce the assessment that the domain is being used for phishing‑related campaigns. No public IP address, SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving the exact web‑application fingerprint unknown at this time. Consequently, defenders cannot verify the specific content or payload delivered by the site, but the existing intelligence is sufficient to justify immediate mitigation.

Recommended actions include adding the domain to network‑level deny lists, updating endpoint URL filtering policies, and ensuring that any email security gateways reference the PhishDestroy and OpenPhish feeds. Continuous monitoring for new resolutions or related subdomains is advised, as attackers often leverage additional Cloudflare‑hosted assets to evade detection. Organizations should also consider sharing any observed traffic with threat‑intel platforms to enrich collective detection capabilities.