zeralabs[.]name

Analysis of zeralabs.name indicates an active phishing domain currently under investigation. The domain was registered through Cloudflare, Inc. and resolves to the IP address 198.18.0.210. Infrastructure analysis reveals the use of Cloudflare services and HTTP/3, with an SSL certificate issued by Google Trust Services. The page title, 'Nur einen Moment…', suggests a temporary holding or redirect page, though the exact content and target of the phishing operation remain unconfirmed. The domain appears on 23 threat intelligence pulses in AlienVault OTX and is blocked by two security blocklists, including PhishDestroy and BLP-Malware. A trust score of 0/100 has been assigned by Gridinsoft, reflecting high suspicion. No detections were reported by the 95 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety. Defenders should treat this domain as high-risk and monitor for further intelligence. Additional technical analysis is required to determine the specific phishing kit, brand impersonation, or campaign objectives. Until more evidence is gathered, network-level blocking is recommended for organizations with exposure to phishing threats.