sp11ct-pralok-biz8-kemvar-morsik[.]pages[.]dev

The domain sp11ct-pralok-biz8-kemvar-morsik.pages.dev is currently active and classified as a generic phishing infrastructure. Registration details show it was provisioned through Cloudflare Pages, indicating the use of a legitimate content‑delivery platform to host malicious content. Threat intelligence records show the domain appears on two independent security blocklists, and both PhishDestroy and OpenPhish have issued explicit blocks, confirming its malicious intent.

VirusTotal analysis reports that 13 of 91 scanning engines flagged the domain, reinforcing the consensus that the site is associated with phishing activity. The risk level is elevated, reflecting the potential for credential harvesting or other fraudulent behavior. No additional technical artifacts such as IP address, ASN, or SSL fingerprint are available in the current dataset, leaving the hosting environment largely uncharacterized.

Defenders should add the domain to network‑level deny lists, update DNS filtering policies to block resolution, and ensure endpoint protection solutions incorporate the observed blocklist entries. Continuous monitoring of Cloudflare Pages subdomains for similar naming patterns is advisable, as adversaries often leverage the same hosting service for rapid deployment. Incident response teams should treat any traffic to this domain as malicious, isolate affected hosts, and collect relevant logs for further forensic analysis.