sp10ct-hured-biz8-kolaf-mizen[.]pages[.]dev

Analysis indicates that the domain sp10ct-hured-biz8-kolaf-mizen.pages.dev is actively being used for credential harvesting as part of a generic phishing campaign. The site is hosted on Cloudflare Pages, a serverless platform that provides static site hosting and automatic TLS termination, which obscures the underlying origin server details. Reputation checks show that the domain has been listed by two independent phishing blocklists, PhishDestroy and OpenPhish, confirming that security providers have observed malicious activity associated with the address.

VirusTotal scans reveal that 14 of 91 submitted samples are flagged by security vendors, reinforcing the malicious classification. No additional public intelligence such as page title, SSL certificate details, or HTTP response codes has been disclosed, leaving the exact content and delivery mechanisms unverified. Defenders should treat any traffic to this domain as hostile.

Network sensors should block outbound connections to the host, and email gateways should add the domain to block lists to prevent further delivery of phishing messages. Incident response teams should monitor for credential leakage that may originate from this domain and consider forced password resets for any accounts that may have been exposed. Continuous monitoring of Cloudflare Pages subdomains for similar naming patterns is recommended, as the platform can be abused to rapidly spin up new malicious sites.