sp12ct-zolsar-biz-havnik-lendor[.]pages[.]dev

The domain sp12ct-zolsar-biz-havnik-lendor.pages.dev is currently classified as a generic phishing site with an elevated risk rating and an active status as of August 03, 2026. Infrastructure analysis shows the domain was registered through Cloudflare Pages, indicating it resides on a serverless hosting platform that abstracts traditional IP ownership and provides built‑in DDoS mitigation. VirusTotal scans have returned detections from 14 of 91 security vendors, suggesting a non‑trivial consensus among anti‑malware engines that the site is malicious.

The domain is listed on two external blocklists and is explicitly blocked by PhishDestroy and OpenPhish, both of which are widely used phishing feed providers. These multiple independent sources reinforce the confidence that the domain is being used for credential‑harvesting or similar phishing activities. No additional public intelligence such as SSL certificate details, HTTP response codes, or page title information is presently available, leaving the exact content and attack vector undocumented.

Defenders should prioritize immediate network‑level blocking of the domain, add it to URL filtering policies across browsers and email gateways, and monitor for any related indicator‑of‑compromise artifacts that may appear in logs. Continuous re‑evaluation is advised in case further analysis uncovers additional infrastructure elements or victim reports, which would refine the threat posture and response actions.