nb3b5v0imiwzs15fi5lz3ary1[.]top

Analysis of nb3b5v0imiwzs15fi5lz3ary1.top indicates recent registration on 15 July 2026 and an active status. The domain resolves to IP 34.216.117.25 and is delegated to the authoritative name servers launch1.spaceship.net and launch2.spaceship.net, both associated with the registrar Spaceship, Inc. VirusTotal records show the domain was submitted to 91 scanning engines with no malicious classifications returned, but the absence of detections does not eliminate the suspicion raised by its generic_phishing label. The combination of a newly created .top TLD, a single‑purpose IP address, and the lack of any known legitimate service suggests a pattern commonly used for credential‑harvesting operations. Current intelligence does not disclose the specific content, target brand, or login page employed, leaving the precise phishing vector unknown. Defenders should block network traffic to the domain and the associated IP, monitor DNS queries for the listed name servers, and add both the domain and IP to threat‑intel feeds. Ongoing observation is advised to capture any future payloads or infrastructure changes that may clarify the campaign’s intent.