sp11ct-quenor-biz8-tarsel-vokmir[.]pages[.]dev

The domain sp11ct-quenor-biz8-tarsel-vokmir.pages.dev is currently classified as an active generic phishing infrastructure with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Cloudflare Pages, indicating the registrar and hosting service are provided by Cloudflare. The domain appears on two external security blocklists and is explicitly blocked by PhishDestroy and OpenPhish, confirming that multiple threat intelligence feeds have recognized it as malicious.

VirusTotal scans have returned 14 positive detections out of 91 security vendors, reinforcing the suspicion that the site is being used for credential‑stealing or other phishing‑related activities. No additional contextual data such as page titles, SSL certificate details, or HTTP response codes are available in the supplied intelligence, leaving the exact content and delivery mechanisms of the site unverified.

Defenders should immediately add sp11ct-quenor-biz8-tarsel-vokmir.pages.dev to URL filtering and DNS block lists, monitor for any outbound connections to the associated Cloudflare IP ranges, and consider updating intrusion detection signatures to flag traffic toward this host. Continuous re‑evaluation is advised, as further observations may reveal additional indicators such as payload delivery methods or compromised credential patterns.