telmora-nqx-zentora-c4x3dp95[.]pages[.]dev

Analysis conducted on August 07, 2026 identifies telmora-nqx-zentora-c4x3dp95.pages.dev as an active phishing domain with elevated risk. The domain resolves to IP address 172.66.47.71, which is associated with Cloudflare's content delivery network. While the hosting infrastructure is legitimate, the domain has been flagged by multiple security vendors: 11 of 91 engines on VirusTotal detect malicious activity, and the domain appears on two independent security blocklists.

PhishDestroy and OpenPhish have both classified this domain as a phishing threat. The exact nature of the phishing content remains unconfirmed, as the page title and targeted brand are not specified in available intelligence. No registration details or SSL anomalies were provided, limiting further infrastructure assessment.

Defenders should treat this domain as compromised and implement immediate blocking at the network and endpoint levels. Given the detection volume and blocklist presence, this domain is not suitable for whitelisting or conditional access policies. Organizations using Cloudflare Pages should review their deployment logs for unauthorized or suspicious subdomain creation matching this pattern.