towolabs[.]info

The domain towolabs.info was registered on July 20, 2026 via NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. DNS resolution points to the Cloudflare edge address 172.67.208.208, with authoritative nameservers julissa.ns.cloudflare.com and sterling.ns.cloudflare.com. The TLS certificate presented is issued by Google Trust Services under the WE1 identifier, indicating that a legitimate certificate authority was used for encryption, but the presence of a valid certificate does not mitigate the phishing risk.

VirusTotal analysis shows that 3 of 91 security vendors have flagged the domain, evidencing early detection by a minority of scanners. The site is listed on a single public security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one dedicated anti‑phishing service considers it malicious. No additional public intelligence such as page titles, brand targeting, or malware kit identifiers is available at this time.

The combination of recent registration, Cloudflare hosting, a valid Google‑issued certificate, and limited vendor detections aligns with a high‑risk, generic phishing profile. Defenders should add towolabs.info to DNS and URL filtering policies, block the associated IP 172.67.208.208 at network perimeters, and monitor for any inbound or outbound traffic to the domain. Continuous re‑scanning with multi‑vendor services is advised to capture any emerging detections, and integration of the PhishDestroy blocklist into security tooling will help enforce the current block status.