# varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev — MALICIOUS

> Warning: The domain varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev is a high-risk phishing site, now offline. Avoid any interaction to stay safe.

## Summary
PhishDestroy identifies varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev as a high-risk generic phishing domain. This domain posed a serious threat by attempting to deceive users into revealing sensitive information through fraudulent means.

Evidence supporting this classification includes its registration through Cloudflare, Inc., presence on one security blocklist, and a VirusTotal analysis flagging it by 17 out of 95 security vendors. The domain resolved to the IP address 188.114.97.3 and was created recently on March 03, 2026. Its page title indicated a suspected phishing site warning by Cloudflare.

Currently, the domain is offline, which mitigates immediate risk. Users and organizations are advised to remain cautious and avoid any interaction with similar suspicious URLs. Continuous monitoring and prompt reporting of such phishing attempts remain essential for internet safety.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-03 01:00:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: jerry.ns.cloudflare.com miki.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 17 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "DNS8", "ESET", "Emsisoft", "Fortinet", "G-Data", "Gridinsoft", "Lionic", "Netcraft", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb117-e22c-745e-8f55-5bdb2eefb7fe.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/eaaf44a9-5b0b-4dbb-8538-50a512ae8223
- Wayback Machine: https://web.archive.org/web/https://varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/varkel-sonvik-biz-denter-halrex-sp7ct12.pages.dev/
Last updated: 2026-03-19