greattabsonline[.]com

This domain, greattabsonline.com, is currently classified as a generic phishing site with a high risk rating. The authoritative name servers are 1.dns-v2.com and 2.dns-v2.com, and DNS resolution returns the IPv4 address 185.163.46.171, which is hosted by MivoCloud SRL in Moldova. The web server responds with HTTP 200 and presents a TLS certificate issued by Let’s Encrypt (entity YE1). The page title advertised is “We sell meds cheaper than anyone else. * greattabsonline.com”, indicating a pharmaceutical‑related lure. Registration details show the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED. Independent scanning on VirusTotal returned five detections out of ninety‑one scanners, and the domain is listed on a single security blocklist maintained by PhishDestroy, which continues to flag it as active. Infrastructure observations confirm the site remains reachable and unblocked beyond the listed blocklist. Uncertainties include the specific payload or credential‑harvesting mechanisms employed, as no page content beyond the title has been disclosed. Defenders should block the domain and its resolved IP at network perimeter devices, add the name servers to DNS‑sinkhole policies, and monitor for any related traffic patterns. Continuous re‑evaluation is advised in case additional detections appear.