sp11ct-tolvik-biz8-zenfar-lorsik[.]pages[.]dev

Analysis of sp11ct-tolvik-biz8-zenfar-lorsik.pages.dev as of August 03 2026 shows the domain is actively used for generic phishing. The domain is hosted on Cloudflare Pages, a static‑site service that automatically provisions TLS certificates and routes traffic through Cloudflare’s edge network. VirusTotal has recorded 15 detections out of 91 scanned vendors, indicating that a notable minority of security engines classify the site as malicious.

The domain also appears on two public phishing blocklists, specifically PhishDestroy and OpenPhish, both of which focus on credential‑stealing sites. These listings reinforce the suspicion raised by the vendor detections. No additional public intelligence such as OTX tags, brand targeting, or page‑title information is currently available, so the exact content and lure employed by the site remain unverified.

The presence of Cloudflare‑provided HTTPS does not mitigate the risk, as malicious actors frequently abuse the platform’s legitimate infrastructure. Defenders should treat the domain as hostile: add it to URL filtering and DNS block policies, monitor outbound connections for attempts to resolve the domain, and educate users to avoid unsolicited links that reference it. Ongoing observation is advised in case the site’s payload or targeting evolves.