tonlabs[.]pro

Analysis indicates that the domain tonlabs.pro was registered on 11 July 2026 through GNAME.COM PTE. LTD. and is using the DNSPod name servers a.dnspod.com, b.dnspod.com and c.dnspod.com. The domain resolves to the IPv4 address 158.94.211.169, which remains reachable as of the report date. VirusTotal scans show that three of ninety‑one security vendors have flagged the domain, suggesting malicious activity despite a low detection count. The threat classification in the source data is generic_phishing, and the risk level is marked high. No public page content, login portals, or targeted brand identifiers have been disclosed, so the specific impersonated service cannot be confirmed. The infrastructure and registration timeline are consistent with opportunistic phishing campaigns that exploit newly created domains to evade reputation filters. Defenders should treat tonlabs.pro as a high‑risk indicator, add the domain and its IP address to block lists, monitor DNS queries for the associated name servers, and continue periodic re‑analysis for any content changes. Given the recent creation date, any future email or web‑based communications referencing tonlabs.pro should be scrutinized for credential‑harvesting attempts.