sp5ct6-framtor-biz-vrolnix-dravtek[.]pages[.]dev

The domain sp5ct6-framtor-biz-vrolnix-dravtek.pages.dev was created on 2026-06-08 and is hosted on Cloudflare Pages, indicating use of a free static‑site service for rapid deployment. Analysis of threat‑intel feeds shows that the domain is presently listed by PhishDestroy as a blocked resource and appears on one additional security blocklist, confirming that defensive communities have already identified it as malicious. VirusTotal has processed the domain and 11 of 91 security vendors returned a positive detection, providing modest but consistent corroboration of its abusive nature.

No public details are available regarding the underlying IP address, TLS certificate, HTTP response codes, or the page title, and no brand name or specific phishing lures have been disclosed in the current intelligence. Consequently, the exact victim‑targeting strategy remains uncertain, though the classification as generic phishing is supported by the observed blocklist entries and vendor detections.

Defenders should add the domain to outbound web‑filter allow‑deny lists, monitor DNS queries for lookups to the domain, and consider expanding network‑level URL filtering to encompass the entire Cloudflare Pages namespace if operationally feasible. Continuous re‑evaluation is recommended, as further artifacts such as page content, SSL details, or additional vendor detections may emerge, allowing refinement of the threat profile and remediation measures.