sp11ct-fardok-biz8-molvik-keslor[.]pages[.]dev

The domain sp11ct-fardok-biz8-molvik-keslor.pages.dev is currently active and has been classified as a generic phishing campaign with an elevated risk rating. Infrastructure analysis shows the site is provisioned through Cloudflare Pages, indicating the use of a legitimate content‑delivery platform to obscure the underlying malicious intent. The domain is listed on two independent phishing blocklists, specifically PhishDestroy and OpenPhish, which have both issued takedown or block actions against it.

VirusTotal scans reveal that 14 out of 91 security vendors have flagged the domain as malicious, providing additional corroboration of its hostile nature. No other technical artifacts such as IP address, SSL certificate details, or HTTP response codes are available in the supplied intelligence. Defenders should prioritize immediate mitigation by adding the fully qualified domain name to network perimeter blocks, DNS filtering policies, and endpoint web‑filtering rules.

Continuous monitoring of DNS query logs for any resolution attempts to this domain or its potential sub‑domains is recommended, as well as periodic re‑evaluation of threat intelligence feeds for new indicators that may arise from related campaigns. Given the active status and elevated risk level, organizations should treat any traffic to this domain as hostile and enforce strict isolation until the domain is confirmed inactive or fully mitigated.