MALICIOUS — CRITICAL
eallab[.]com
Analysis of eallab.com shows that the domain was registered through Name SRS AB on July 28, 2025 and is currently resolved to the Cloudflare address 104.21.17.48 (AS13335, United States).
- VirusTotal
- 14/95
- Blocklists
- No stored match
- Disponibilidade
- Conteúdo indisponível · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
eallab.com — Conteúdo indisponível (HTTP 502). Resumo das evidências: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); Spamhaus DBL_PHISH; PhishDestroy score 97/100. Registrador: Name SRS AB.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Evidence Analysis
Analysis of eallab.com shows that the domain was registered through Name SRS AB on July 28, 2025 and is currently resolved to the Cloudflare address 104.21.17.48 (AS13335, United States). The authoritative nameservers are garret.ns.cloudflare.com and haley.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. No TLS certificate is presented for the host, and an HTTP request returns a page whose title reads “Site is created successfully!”. The site is presently taken offline, and its status is recorded as offline in the intelligence feed.
Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, Scamadviser reports 1 out of 100, and the domain appears on a single security blocklist, specifically PhishDestroy. VirusTotal has flagged the domain in 14 of 95 scanned engines, providing independent confirmation of malicious intent. The combination of a generic phishing classification, the lack of encryption, low trust scores, and multiple vendor detections suggests that eallab.com is being leveraged for credential‑stealing or similar fraudulent activity.
Because the content of the site beyond the title has not been captured, the exact payload or targeted brand cannot be confirmed at this time. Defenders should add eallab.com to URL filtering and DNS block lists, monitor for any resurgence of the domain, and enforce TLS inspection for outbound traffic to Cloudflare‑hosted IPs to detect potential credential exfiltration. Continuous re‑scanning of the domain is advised to capture any changes if the site is re‑activated.
Cobertura dos dados13 recorded checks
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências e relatórios externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.