sp11ct-norvik-biz8-feldor-havsar[.]pages[.]dev

The domain sp11ct-norvik-biz8-feldor-havsar.pages.dev is currently classified as an active generic phishing site. Intelligence records show the domain is listed on two security blocklists and is explicitly blocked by both PhishDestroy and OpenPhish, confirming its malicious intent. VirusTotal reports that 13 of 91 scanned security vendors have flagged the domain as malicious, providing independent corroboration of the phishing designation.

Registration data indicates the domain was provisioned through Cloudflare Pages, a legitimate hosting service that is frequently abused for short‑lived malicious sites. No additional infrastructure details such as IP address, SSL certificate fingerprints, HTTP status codes, or page title have been disclosed, leaving those aspects of the site’s footprint unknown at this time. The lack of publicly available content analysis means the exact landing page content and targeted brand, if any, cannot be confirmed.

Defenders should treat the domain as high‑confidence malicious: add it to internal deny‑lists, enforce URL filtering to block outbound connections, and monitor DNS queries for similar Cloudflare‑Pages subdomains. Continuous re‑scanning with VirusTotal and inclusion in threat‑intel feeds are advised to capture any changes in detection scores. Network and endpoint telemetry should be reviewed for any connections to the domain, and alerts should be generated for any attempted user interaction.