# univ4labs.net — MALICIOUS

> PhishDestroy identifies univ4labs.net as a credential theft domain with 14/95 VirusTotal detections. Blocked by Enkrypt since May 30, 2024. Avoid this site.

## Summary
PhishDestroy identifies univ4labs.net as a brand impersonation threat designed to steal user credentials under the guise of a legitimate academic service. The domain mimics university-related branding to deceive visitors into entering login details, which are then harvested by attackers. Technical analysis confirms the site is actively engaging in fraudulent activity with no legitimate educational purpose.  This domain was flagged by 14 security vendors on VirusTotal out of 95 analysis engines, indicating elevated risk. univ4labs.net was registered on May 30, 2024 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolved to IP address 172.67.210.192 via a Google Trust Services SSL certificate. It has been blocked by Enkrypt and flagged on at least one major security blocklist.  If you visited univ4labs.net or entered any credentials, immediately change passwords for that account and enable multi-factor authentication. Scan your device for malware and monitor accounts for unauthorized access. Report the incident to your organization and consider using a password manager to prevent reuse across sites. Never re-enter credentials on this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-05-30 22:11:13
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.210.192

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/205f257b-8f17-44a1-a3db-bc147d876ab9
- PhishDestroy: https://phishdestroy.io/domain/univ4labs.net/
- LLM endpoint: https://phishdestroy.io/domain/univ4labs.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/univ4labs.net/
Last updated: 2026-03-27