sp12ct-zemsel-biz-farnik-hovdar[.]pages[.]dev

The domain sp12ct-zemsel-biz-farnik-hovdar.pages.dev is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Cloudflare Pages, indicating the use of Cloudflare’s edge network for content delivery and DNS resolution. No explicit IP address is disclosed, but traffic to the domain will resolve to Cloudflare’s shared address space, which can complicate direct sink‑hole or takedown actions. The domain appears on two external security blocklists and is explicitly blocked by PhishDestroy and OpenPhish, confirming that reputable phishing‑monitoring services have identified it as malicious.

VirusTotal reports that 14 of 91 security vendors have flagged the domain, providing additional corroboration of its malicious nature. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any brand‑specific impersonation data; therefore the precise content and target of the phishing campaign remain unverified. Defenders should prioritize immediate blocking of the domain at perimeter firewalls, DNS resolvers, and proxy filters.

Continuous monitoring for DNS queries or outbound connections to the Cloudflare edge network associated with this domain is advisable, as attackers may leverage the same hosting platform for additional payloads. Organizations should also update internal threat intelligence feeds with the observed blocklist identifiers and VT detection count to improve detection accuracy. Given the elevated risk level, security teams should consider heightened user awareness training focused on generic phishing tactics and enforce multi‑factor authentication to mitigate potential credential compromise.