sp12ct-pradel-biz-kesrik-lomsar[.]pages[.]dev

Analysis indicates that the domain sp12ct-pradel-biz-kesrik-lomsar.pages.dev is currently active and has been classified as a generic phishing site. Registration data shows the domain is provisioned through Cloudflare Pages, a shared hosting service that is frequently abused for malicious campaigns. On VirusTotal, 14 of 91 security vendors have flagged the domain, providing concrete industry‑wide detection evidence. The domain also appears on two security blocklists and is explicitly blocked by both PhishDestroy and OpenPhish, confirming its malicious reputation across multiple filtering platforms.

No additional metadata such as page title, SSL certificate details, or HTTP status codes is supplied, leaving the precise content and transport security of the site unverified. The elevated risk level assigned to the domain aligns with the observed vendor detections and blocklist presence. Defenders should treat the domain as high‑risk: DNS resolvers, web proxies, and endpoint protection solutions ought to deny resolution and block any outbound connections to the domain.

Continuous monitoring for changes in detection counts, new blocklist entries, or the emergence of SSL/TLS information is recommended, as threat actors may adjust the infrastructure over time. Security operations teams can also incorporate the unique seed 66538a in correlation rules to detect related artifacts that may share the same generation pattern. Until further forensic analysis of the hosted pages is possible, the precautionary measure of blocking the domain remains the primary mitigation strategy.