alert-text-esl[.]top

The domain alert-text-esl.top was registered on July 21, 2026 through NameSilo, LLC and remains active as of the report date, July 22, 2026. DNS resolution is provided by ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com, and the A record maps to the IPv4 address 66.55.66.105. Threat intelligence streams have classified the site as a generic phishing operation, and Google Safe Browsing has flagged the domain for social engineering content.

VirusTotal analysis shows that 13 of 95 scanned security vendors have raised detections against the domain, indicating a moderate consensus of malicious behavior. The domain is listed on two external blocklists and is actively blocked by the PhishDestroy and OpenPhish feeds, reinforcing its recognition as a phishing vector. While the available data confirms the domain’s malicious intent and its infrastructure components, no public information has been released regarding the underlying web server, SSL certificate details, HTTP response codes, or the specific phishing page content.

Consequently, the precise tactics employed on the landing page remain uncertain. Defensive teams should prioritize adding alert-text-esl.top to local deny lists, enforce DNS filtering on the listed nameservers, and monitor outbound connections to the IP address 66.55.66.105. Continuous re‑evaluation of the domain’s status is advised, as threat actors may modify hosting or content to evade detection.