sp12ct-formek-biz-prandel-vesnik[.]pages[.]dev

The domain sp12ct-formek-biz-prandel-vesnik.pages.dev is currently active and has been identified as a generic phishing resource. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain, indicating a consensus among multiple detection engines that the site hosts malicious content. The domain is listed on two reputable blocklists, PhishDestroy and OpenPhish, and appears on a total of two security blocklists, reinforcing its malicious classification. Registration details reveal that the site is hosted on Cloudflare Pages, a serverless platform that provides shared hosting and default TLS termination.

As a result, the site benefits from Cloudflare’s global edge network, which can obscure the underlying origin IP and make attribution to a specific server more difficult. No additional infrastructure details such as explicit IP addresses, ASN, or country of operation are publicly disclosed. Likewise, no page title, Safe Browsing verdict, or OTX indicators have been provided, leaving those aspects of the site’s behavior unverified at this time.

Given the presence of multiple vendor detections and blocklist entries, defenders should treat the domain as high‑risk. Recommended mitigation actions include adding the domain to URL filtering policies, enforcing DNS‑level blocking, and monitoring outbound traffic for connections to Cloudflare‑hosted subdomains that match the observed pattern. Continuous re‑evaluation is advised, as further analysis of page content or HTTP responses could reveal additional indicators of compromise.