sp11ct-kovrek-biz8-zelnik-morsan[.]pages[.]dev

Analysis of sp11ct-kovrek-biz8-zelnik-morsan.pages.dev indicates an active phishing domain hosted on Cloudflare Pages infrastructure. As of August 03, 2026, the domain is flagged by 14 of 91 security vendors on VirusTotal, with detections specifically identifying phishing content. It appears on two security blocklists: PhishDestroy and OpenPhish, both of which specialize in phishing threat intelligence.

No additional details regarding the targeted brand, phishing kit, or exact page content are currently available in the provided intelligence. The domain's registration through Cloudflare Pages suggests potential abuse of a legitimate hosting service, a common tactic to evade initial reputation-based blocking. Defenders should treat this domain as an active phishing threat, particularly given its presence on multiple specialized blocklists.

Network-level blocking or monitoring for connections to this domain is recommended. Further investigation into associated IP addresses, SSL certificates, or redirect chains may provide additional context, though no such data is presently available in the supplied evidence.