advertise-003[.]top

This domain, advertise-003.top, is identified as a credential theft operation targeting user login credentials. Analysis confirms the domain is currently offline, though prior activity remains a verified threat. The page title 'Log in' suggests an attempt to mimic legitimate authentication portals, a common tactic for harvesting sensitive account details. Infrastructure analysis reveals the domain was registered through NameSilo, LLC on January 25, 2026, and resolves to IP 121.127.255.151, hosted in Hong Kong under AS152194 (CTG Server Limited). The domain lacks an SSL certificate, increasing exposure to interception risks. Security vendors flagged this domain in 19 of 95 VirusTotal scans, and it appears on one active blocklist. Google Safe Browsing also classifies it as malicious, reinforcing its high-risk classification. While advertise-003.top is currently offline, residual risk persists due to its recent malicious activity. Organizations should proactively block the domain and its associated IP (121.127.255.151) at the network perimeter. Security teams are advised to monitor for credential reuse attempts from compromised accounts and conduct retrospective log analysis for prior interactions with this domain. End-users should be alerted to verify domain authenticity before entering login credentials, particularly on pages lacking SSL encryption.