sp10ct-furep-biz8-dovem-karin[.]pages[.]dev

This domain, sp10ct-furep-biz8-dovem-karin.pages.dev, is currently classified as an active generic phishing site with an elevated risk rating. VirusTotal records show that 17 out of 91 scanned security engines have flagged the domain, indicating a notable detection rate across multiple vendors. The domain is listed on two public security blocklists and has been explicitly blocked by the PhishDestroy and OpenPhish feed providers, reinforcing the consensus that it is being used for malicious phishing campaigns. Infrastructure analysis reveals that the domain is hosted on Cloudflare Pages, a static‑site hosting service provided by Cloudflare. While Cloudflare Pages is commonly used for legitimate content, its abuse by threat actors is documented, and the presence of this domain on the platform does not mitigate the observed malicious indicators.

No additional information about page title, SSL certificate details, or HTTP response codes is currently available in the intelligence feed. The elevated risk level reflects the combination of vendor detections, blocklist presence, and the domain’s recent activity profile. Because the domain was registered via Cloudflare’s automated provisioning, traditional WHOIS signals provide limited attribution, and the registration date aligns with the appearance of the domain in phishing feeds. No SSL certificate anomalies have been reported, but the lack of visible TLS fingerprint does not preclude misuse. The domain’s HTTP response has not been captured, so the exact payload delivered to victims remains unknown, though the classification as generic phishing suggests credential‑harvesting pages are likely involved.

Defenders should treat any traffic to sp10ct-furep-biz8-dovem-karin.pages.dev as hostile. Recommended actions include adding the domain to network deny lists, configuring web proxies to block access, and monitoring DNS logs for resolution attempts.