earnbd7[.]top

This domain, earnbd7.top, is identified as a credential theft scam designed to impersonate PTCLab, a recognized entity in the technology or laboratory services sector. Analysis indicates the site employs deceptive login interfaces to harvest user credentials, a common tactic in targeted phishing campaigns. The domain does not exhibit characteristics of a crypto drainer or other specialized phishing kits but focuses on credential acquisition through brand impersonation. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 65.108.194.49 and was registered through Cosmotown on February 21, 2026. VirusTotal detection metrics show 4 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The site uses PHP, Bootstrap, LiteSpeed, Slick, jQuery, and HTTP/3 technologies, which are consistent with modern phishing infrastructure. No Google Safe Browsing (GSB) detections were reported at the time of analysis. The domain is currently offline, having been taken down following detection and blocking by security systems. However, residual risk remains due to the potential reuse of the IP address or registration of similar domains by the same threat actor. Users who may have interacted with this domain are advised to reset credentials for any accounts accessed during the exposure window and monitor for unauthorized activity. Organizations should update blocklists to include the domain and associated IP to prevent future access attempts.