sp12ct-lendor-biz-karmik-pravsel[.]pages[.]dev

The domain sp12ct-lendor-biz-karmik-pravsel.pages.dev is currently active and has been classified as a generic phishing threat with an elevated risk rating. Infrastructure analysis shows that the site is hosted on Cloudflare Pages, indicating that the underlying web server is provided through Cloudflare’s edge network. No additional registrar information is available beyond the Cloudflare Pages association.

VirusTotal scans have returned 15 positive detections out of 91 security vendors, confirming that a subset of commercial scanners recognize malicious behavior linked to this domain. The domain is listed on two external blocklists and is explicitly blocked by both PhishDestroy and OpenPhish, further corroborating its use in phishing campaigns. While the available intelligence confirms the presence of malicious activity, the public-facing content, page title, and any credential‑harvesting mechanisms have not been captured in the current dataset, leaving the exact phishing vector and targeted brand undefined.

Likewise, IP address attribution, TLS certificate details, and geo‑location data have not been disclosed, limiting a deeper infrastructure fingerprint. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any new indicators of compromise that reference the same Cloudflare Pages host, and update detection rules to incorporate the 15 vendor‑reported signatures. Ongoing observation of the domain’s status on blocklists and future VirusTotal scans is recommended to assess changes in its threat profile.