tl78810[.]com

tl78810.com was registered through Metaregistrar BV on July 15, 2024 and is currently resolved to the IPv4 address 172.239.193.33. The domain uses four parklogic nameservers (ns1.parklogic.com, ns1.rr585.parklogic.com, ns2.parklogic.com, ns2.rr585.parklogic.com), a configuration commonly observed for parked or quickly‑provisioned domains. The IP belongs to a hosting provider that is frequently referenced in phishing infrastructure, but no additional attribution such as ASN or country is disclosed in the available data.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one downstream security product has observed malicious use. VirusTotal reports that the domain has been scanned by 95 AV engines; at the time of the latest scan no engine flagged the host, but the absence of detections does not constitute evidence of benign intent. No SSL certificate details, HTTP status codes, or page‑title information have been published, so the content served by the site remains unverified.

Consequently, analysts cannot confirm the specific phishing lure or target brand, only that the domain is classified as a generic phishing indicator in the intelligence source. Defenders should consider adding the domain to outbound‑allow lists for blocking, monitor DNS queries for repeated resolution to 172.239.193.33, and employ sink‑hole or sandbox analysis if traffic is observed. Continuous re‑evaluation is advised, as the domain’s short age (created less than two years ago) and active status suggest the possibility of future malicious payloads.