es-load.info

https://es-load.info/logs/69ce28bc37350

172.67.142.206 · Cloudflare, Inc.

Location

Toronto, Canada

Domain Age

31 days

HTTP

200 · 32.5s

SSL

Valid· E7, Let's Encrypt, US

Status

COMPLETED

Visual Evidence

Zoom

Title: "Dashboard"

Save

Take this site down

Report to 50+ vendors instantly

KB/IOK Matches (0)—

No KB/IOK detections were recorded for this scan.

Unknown

Credential Phishing

unknown · 4/15/2026

Summary

The page at es-load.info presents a login form with fields for username and password, indicating potential credential harvesting. The domain is newly registered, and the presence of a login form combined with the suspicious nature of the domain raises significant concerns about phishing activity. The site is hosted behind Cloudflare, which is often used to obscure malicious intent.

Evidence Summary

▸Observed 2 capture stage(s); canonical stage is settled_render.

▸Canonical stage contains password collection UI.

▸Distinctive asset clues: v8c78df7c7c0f484497ecbca7046644da1771523124516, app.js, app.css, css.

Capture

Stages: 2

Canonical: Settled Render

Changed: No

Credential Signals

Forms: 1

Password fields: 1

Late-stage login UI: No

Resource Signals

Resources: 8

Hosts: 4

Domains: 4

Suspicious Endpoints

hxxps://es-load[.]info/login

Attack Techniques (3)

Indicators of Compromise (3)

▸Domain created 31 days ago

▸Login form POSTs to https://es-load.info/login

▸Hidden form inputs detected

Risk AssessmentUsed in abuse reports

The site es-load.info is newly registered and contains a login form designed to capture user credentials, which is a strong indicator of phishing activity. The presence of a password input field and the site's recent creation date further support this assessment. Additionally, the site is hosted behind Cloudflare, suggesting an attempt to evade detection. Immediate action is recommended to mitigate potential user harm.

Recommended Action

Suspend Domain

Cross-Reference8

URL Intelligence