qelvora-gld-zormavi-a5x8dp94[.]pages[.]dev

The domain qelvora-gld-zormavi-a5x8dp94.pages.dev is currently flagged by Google Safe Browsing for social engineering, indicating that the URL is associated with deceptive practices designed to harvest credentials or personal data. The domain is hosted on Cloudflare Pages, as evidenced by the registrar information, which provides a content delivery network and static site hosting service. Detection of the domain by the security vendor PhishDestroy has led to its inclusion on a single known blocklist, reinforcing the assessment that the site is being actively monitored for malicious activity.

The threat classification in the intelligence feed is listed as generic phishing, and the risk level remains under investigation while the status is marked active, suggesting ongoing operation. No additional technical artifacts such as IP address, SSL certificate details, HTTP response codes, or page title have been disclosed, leaving those aspects of the infrastructure unverified.

Defenders should treat the domain as hostile, block network connections to the host, and incorporate the domain into existing URL filtering and email security policies. Continuous monitoring for any changes in detection counts, additional blocklist listings, or new Safe Browsing updates is recommended to adjust response measures promptly.