elslabs[.]info

Analysis indicates that the domain elslabs.info was registered on August 05, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on Cloudflare infrastructure, as evidenced by the authoritative nameservers grant.ns.cloudflare.com and suzanne.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, a Cloudflare edge node that masks the true backend host. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service.

VirusTotal scanning shows that one out of ninety‑one security vendors flagged the domain, confirming that at least one detection engine considers it malicious. The threat is classified as a generic phishing campaign and its status is listed as active. No additional intelligence such as page title, SSL certificate details, or observed HTTP responses is available, leaving the specific impersonated brand or lure unknown.

Infrastructure analysis suggests a rapid provisioning pattern typical of short‑lived phishing sites, with the use of a reputable CDN to provide resilience and hide origin. Defenders should immediately add elslabs.info to URL filtering and firewall block lists, monitor DNS queries for the associated Cloudflare IP, and consider sharing the indicator with threat‑sharing communities. Ongoing vigilance is advised, as the lack of further public artifacts means the campaign could evolve to target additional brands or employ new payloads.