zunaro-biz-qelvor-29126[.]pages[.]dev

This domain, zunaro-biz-qelvor-29126.pages.dev, is currently identified as a confirmed phishing site specializing in fake security alerts impersonating Cloudflare. Analysis indicates the page displays deceptive warnings designed to trick visitors into believing their browser or connection is compromised, a common tactic used to harvest credentials or distribute malicious payloads. The site was operational until recently but has since been taken offline following detection. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 23, 2026, and resolves to the IP address 172.66.44.115. Despite its recent creation, the domain has already been flagged by one security blocklist, specifically PhishDestroy. VirusTotal reports zero detections out of 95 vendors, suggesting the threat was either too new or evasive at the time of scanning. Additional technical indicators include the use of HTTP/3, HSTS, and a Google Trust Services SSL certificate, which are often leveraged to lend an air of legitimacy to malicious infrastructure. Gridinsoft assigned the domain a trust score of 0 out of 100, further corroborating its fraudulent nature. As of the latest assessment, the domain has been rendered offline, likely due to enforcement actions by the hosting provider or security entities. However, the infrastructure remains a potential risk for re-emergence under a different name or subdomain. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who may have interacted with the site should immediately reset any credentials entered and scan their systems for unauthorized activity. Monitoring for similar domains registered through the same provider and resolving to the same IP range is recommended to preempt further threats.