sp11ct-karsen-biz8-zoltra-femvik[.]pages[.]dev

Analysis indicates that the domain sp11ct-karsen-biz8-zoltra-femvik.pages.dev is hosted on Cloudflare Pages, a service frequently leveraged for rapid content delivery and, in malicious cases, for transient phishing infrastructure. The domain is currently listed on two public security blocklists and is actively blocked by the PhishDestroy and OpenPhish feeds, confirming its classification as a phishing resource. VirusTotal reports that 14 out of 91 scanning engines have flagged the domain as malicious, reinforcing the elevated risk rating assigned by analysts.

The threat type is recorded as generic phishing, and the operational status is marked as active, suggesting that the site is still serving malicious content or credential‑harvesting pages. Defenders should prioritize immediate containment measures: add the domain to DNS or proxy deny lists, enforce web‑gateway blocks, and monitor outbound traffic for attempts to resolve or contact the domain. Continuous re‑scanning with VirusTotal or similar aggregators is advised to capture any changes in detection ratios, and security teams should correlate any observed login attempts or credential submissions with known phishing campaigns.

Given the limited public metadata beyond the hosting provider and blocklist presence, further forensic investigation of the underlying page content, TLS certificate details, and network traffic patterns would be required to fully map the attack chain. Until such deeper analysis is performed, the prudent stance is to treat the domain as hostile and prevent any user interaction with it.