p26y[.]top

This domain, p26y.top, was registered on May 18, 2026, through NameMart Pte. Ltd. and remains active as of July 18, 2026. Infrastructure analysis reveals it resolves to the IP address 103.27.177.164 and uses a Let's Encrypt SSL certificate, a common choice for both legitimate and malicious domains. The domain is currently flagged by OpenPhish and appears on one security blocklist, with 12 of 95 security vendors in VirusTotal identifying it as malicious. Additionally, it is referenced in one AlienVault OTX threat intelligence pulse, indicating its presence in shared threat feeds. While the domain is classified as generic phishing, no specific brand impersonation or scam type has been confirmed in available data. The exact content of the site has not been analyzed, so the nature of the phishing attempt remains unverified. Defenders should treat this domain as high-risk due to its active status, blocklist presence, and detection by multiple security vendors. Network-level blocking of the IP address 103.27.177.164 and monitoring for connections to p26y.top are recommended to mitigate potential threats. Further analysis of the site's content may provide additional context regarding its intended target or methodology.