allystandard[.]top

On July 24, 2026 the domain allystandard.top was observed as an offline site that has been identified as a brand‑impersonation vector targeting the “base” brand. The domain was registered on 19 September 2025 through Global Domain Group LLC and points to the IPv4 address 198.12.80.250, which is hosted by HostPapa (AS36352) in the United States. No TLS certificate is presented on the host, indicating that HTTPS connections are unavailable. The authoritative name servers are listed as dns1.safedatahost.cloud, dns2.safedatahost.cloud, ns1.coreserverhost.com and ns2.cores, suggesting a mixed hosting configuration that may be leveraged to increase resilience.

The web page, when reachable, returned the title “Alystandard bank”, which does not match the targeted brand and further evidences the attempt to create a deceptive appearance. Gridinsoft assigned a trust score of 0 / 100, and the domain is currently blocked by PhishDestroy and appears on one additional security blocklist. VirusTotal scans show that eight out of ninety‑five antivirus and URL‑reputation engines flagged the domain as malicious, reinforcing the suspicion of illicit activity. The absence of an SSL certificate, the low trust score, and multiple blocklist entries collectively indicate a high likelihood that the domain is being used for fraudulent purposes.

At present the site is offline, so content cannot be examined directly; therefore the specific phishing page structure, credential‑capture mechanisms, or payload delivery methods remain unknown. Defenders should continue to enforce DNS‑level blocking for allystandard.top, monitor the associated IP address 198.12.80.250 for any future activation, and include the domain in URL‑filtering and email‑gateway rules. Threat intelligence feeds should be updated to reflect the brand‑impersonation classification and the observed indicators of compromise, and any inbound traffic to the listed name servers should be scrutinized for suspicious activity.