sp12ct-prasik-biz-zemnor-lovdek[.]pages[.]dev

Analysis of sp12ct-prasik-biz-zemnor-lovdek.pages.dev shows that the domain is actively used for generic phishing campaigns. The domain is hosted on Cloudflare Pages, indicating a serverless static‑site infrastructure provided by Cloudflare. It has been listed on two public phishing blocklists, specifically PhishDestroy and OpenPhish, confirming that at least two independent tracking services have observed malicious activity associated with the host. Google Safe Browsing classifies the URL as a social‑engineering threat, which aligns with the generic phishing designation.

VirusTotal reports that 15 of 91 scanned security vendors flagged the domain, providing additional independent corroboration of malicious intent. The high‑risk rating and active status suggest ongoing exploitation. No public WHOIS details beyond the registrar information are available, and the underlying IP address or ASN have not been disclosed in the supplied data, limiting deeper infrastructure attribution. Likewise, SSL certificate details, HTTP response codes, page title, and any observed payloads have not been published, leaving the exact phishing vector (e.g., credential‑stealing page, malicious download) uncertain.

Defenders should therefore treat any traffic to this domain as hostile. Recommended mitigations include adding the domain to local deny lists, configuring web‑filtering solutions to block it, and monitoring outbound connections for attempts to resolve the host. Continuous re‑evaluation is advised, as future scans may reveal additional indicators such as malicious scripts or credential‑harvesting forms.