eschallenger[.]pro

Analysis of the domain eschallenger.pro, observed on July 23, 2026, indicates that it was actively used for a generic phishing campaign before being taken offline. The domain was registered on November 19, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is served by the nameservers dns1.regway.com through dns4.regway.com. DNS resolution points to the IPv4 address 193.221.201.0, which belongs to AS205775 operated by NEON CORE NETWORK LLC and is geolocated to Germany. No TLS certificate was presented, confirming the absence of HTTPS protection at the time of capture. Reputation services flag the domain as highly malicious.

Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser reports a score of 1 out of 100. VirusTotal scans show that 20 of 95 antivirus and URL‑checking engines flagged the domain, and the domain appears on a single security blocklist. PhishDestroy has explicitly blocked the domain, and AlienVault OTX lists it in 17 separate threat‑intelligence pulses. The page title returned by the web server is the literal string “eschallenger.pro”, providing no additional context about the targeted brand or service. The available evidence confirms the presence of malicious infrastructure but leaves several operational details unknown.

Content served by the site, the specific phishing lure, and any credential‑harvesting mechanisms have not been captured, and no SSL/TLS configuration was observed. Defenders should continue to block the resolved IP address 193.221.201.0 and the associated ASN, monitor for re‑use of the same nameserver set, and add the domain to internal blocklists. Organizations employing URL filtering should ensure that the domain is denied in web‑proxy and firewall policies. Continuous monitoring of threat‑intel feeds, especially AlienVault OTX and PhishDestroy, is recommended to detect any future re‑activation or replication of the observed infrastructure.