fotra-sentra-biz-lomra-dokfi-sp19ct3mur[.]pages[.]dev

On July 29, 2026, investigators recorded the domain fotra-sentra-biz-lomra-dokfi-sp19ct3mur.pages.dev as an active generic phishing infrastructure with an elevated risk rating. The domain was created on March 18, 2026 and is hosted on Cloudflare Pages, a service frequently leveraged for rapid deployment of short‑lived malicious sites. VirusTotal analysis shows that 17 of 91 security vendors have flagged the domain, indicating a notable detection consensus.

The domain is presently listed on one security blocklist and has been blocked by the PhishDestroy filtering service, suggesting that at least some defensive platforms have already incorporated it into their deny lists. No additional public intelligence such as page titles, targeted brands, or specific phishing kits has been released, leaving the exact lure and victim profile unconfirmed. The lack of further contextual data means that defenders should treat any traffic to the domain as suspicious.

Recommended mitigation steps include adding the fully qualified domain to web‑filter blocklists, employing DNS‑sinkhole or threat‑intel feeds that contain the domain, and monitoring for related C2 or credential‑harvesting activity. Continuous re‑evaluation is advised, as future observations may reveal payload characteristics or victim targeting that could refine the threat profile.