sp12ct-vaskel-biz-promik-zeldor[.]pages[.]dev

The domain sp12ct-vaskel-biz-promik-zeldor.pages.dev is currently flagged as an active generic phishing threat as of August 07, 2026. This assessment is based on its inclusion on at least one known security blocklist and confirmed detections from 14 out of 91 security vendors according to VirusTotal. The domain resolves to IP address 172.66.46.236 and is hosted within the pages.dev environment. There is no public information regarding the specific brand or service being impersonated, nor is there evidence available describing the website’s content, as no page title or brand targeting details have been provided.

The site has been blocked by PhishDestroy, further suggesting that it is used as part of malicious activities targeting end users. Given the elevated risk rating and active status, defenders should treat this domain as a credible threat and ensure it is blocked at both endpoint and network perimeter controls. Automated detection platforms have already responded, but manual review and threat hunting may be warranted for organizations that have observed network traffic to this host.

At this time, there is no evidence describing the precise phishing lure or attack scenario, so users should be warned to avoid interaction with any communications or links referencing this domain. Ongoing monitoring is recommended in case additional indicators or related infrastructure emerge. All actions should be based on the current, verifiable intelligence and the recorded detections from security vendors and blocklisting services.