# kelmor-biz-zantix-17126.pages.dev — MALICIOUS

> kelmor-biz-zantix-17126.pages.dev is flagged for phishing risks. Avoid interacting with this domain and ensure your credentials remain secure.

## Summary
PhishDestroy identifies kelmor-biz-zantix-17126.pages.dev as a medium-risk generic phishing domain. It was created recently and is suspected of attempting to deceive users, though no specific brand impersonation has been confirmed. The domain is classified under generic phishing threats due to its behavior and detection patterns.

Technical indicators reveal that the domain resolves to IP address 172.66.44.73 and was registered through Cloudflare, Inc. It appears on one security blocklist and has been flagged by 9 out of 95 security vendors on VirusTotal, indicating moderate consensus on its malicious nature. The domain’s infrastructure leverages Cloudflare’s services, which is common in phishing campaigns to mask origin and facilitate rapid deployment.

Currently, kelmor-biz-zantix-17126.pages.dev is offline, reflecting a responsive takedown effort likely prompted by the detection alerts. Users are advised to avoid any contact with this domain and report any suspicious communications referencing it. Continuous monitoring is recommended to detect any attempts of reactivation or related campaign activity.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-03 01:00:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.73
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: denver.ns.cloudflare.com emma.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["ADMINUSLabs", "DNS8", "ESET", "Emsisoft", "Gridinsoft", "Netcraft", "Phishing Database", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/Q7p1z04F/c02f2c240630.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/32c8dc17-22fd-40e9-9707-981b75e17fc6
- Wayback Machine: https://web.archive.org/web/https://kelmor-biz-zantix-17126.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/kelmor-biz-zantix-17126.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/kelmor-biz-zantix-17126.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kelmor-biz-zantix-17126.pages.dev/
Last updated: 2026-03-19