sp10ct6-slornik-biz-platem-frurnex[.]pages[.]dev

The domain sp10ct6-slornik-biz-platem-frurnex.pages.dev was registered on June 08, 2026 through Cloudflare Pages. Within weeks of its creation it was identified by the PhishDestroy service and placed on a security blocklist, indicating active malicious use. VirusTotal analysis shows that 11 of 91 scanning engines have flagged the domain, a signal that the site exhibits characteristics commonly associated with phishing infrastructure. The blocklist entry, combined with the PhishDestroy block, confirms that the domain is being used to host a generic phishing campaign, although the specific targeted brand or credential‑collection page has not been disclosed in the available data.

The rapid appearance on a blocklist suggests a low‑cost, disposable hosting model typical of Cloudflare‑based phishing kits. No additional intelligence such as IP address, ASN, or SSL certificate details is provided, so the broader hosting footprint remains unclear. Likewise, the page title and any embedded URLs have not been examined, leaving the exact lure and victim‑targeting strategy uncertain. Defenders should treat this domain as high‑confidence malicious.

Immediate actions include adding the fully qualified domain name to network‑level deny lists, updating endpoint protection signatures, and ensuring that web‑filtering solutions block any HTTP/S request to the host. Continuous monitoring of Cloudflare Pages registrations for similar naming patterns may help uncover related campaigns before they become active. Because the domain is only weeks old, rapid takedown requests to the registrar or Cloudflare may be effective if the hosting provider’s abuse process is engaged.