sp12ct-prasok-biz-karmel-fondik[.]pages[.]dev

The domain sp12ct-prasok-biz-karmel-fondik.pages.dev is hosted on Cloudflare Pages and has been classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain was registered through Cloudflare’s Pages service, which provides static site hosting and a shared IP pool, making attribution to a single operator difficult. The domain appears on two independent security blocklists and is actively blocked by PhishDestroy and OpenPhish, indicating that reputable anti‑phishing feeds have observed malicious activity originating from this host.

VirusTotal scans have recorded 14 positive detections out of 91 security vendors, reinforcing the suspicion that the site is being used for illicit credential harvesting or similar tactics. No additional data such as IP address, ASN, or SSL certificate details are available in the current intelligence set, and the page title or visible content has not been publicly disclosed, leaving the exact phishing lure unknown.

Defenders should continue to block the domain at network perimeters, update URL filtering policies, and monitor for any related indicators that may emerge from the blocklists. Given the active status and the multiple vendor detections, it is advisable to treat any traffic to this domain as malicious and to educate end‑users about the risk of unsolicited login prompts that may be delivered via Cloudflare‑hosted pages.