qelquro-nqx-belxeta-p8t4hk23[.]pages[.]dev

Analysis of the domain qelquro-nqx-belxeta-p8t4hk23.pages.dev, observed on August 07, 2026, indicates active malicious activity classified as generic phishing. The domain resolves to the IP address 172.66.44.139 and is currently listed on a single security blocklist. It has been explicitly blocked by the PhishDestroy mitigation service, demonstrating that at least one defensive platform has taken protective action against it.

VirusTotal scans show that 10 out of 91 security vendors have flagged the domain as malicious, providing independent corroboration of its threat status. The elevated risk rating reflects the combination of active hosting, blocklist presence, and multi‑vendor detections. No additional intelligence such as SSL certificate details, page title, or brand targeting is available at this time, leaving the precise phishing campaign content unverified.

Defenders should continue to block the domain at network perimeters, update DNS filtering rules to include the associated IP address, and monitor for any new indicators that may emerge from further analysis. Organizations employing endpoint protection should ensure their solutions ingest the VirusTotal detection data to trigger appropriate alerts. Ongoing observation is recommended to capture any changes in hosting or detection patterns that could affect the threat landscape.