amtrixup-tyn[.]top

This domain, amtrixup-tyn.top, is flagged as a generic phishing site designed to harvest user credentials through fake account verification prompts. Analysis indicates no direct association with a specific brand, but the site mimics common login portals to deceive targets into submitting sensitive information. No crypto drainer or known phishing kit signatures were identified in initial scans, though the infrastructure aligns with low-effort credential theft operations. Infrastructure analysis reveals the domain resolves to IP address 39.109.117.195 and was registered on February 26, 2026, through Gname.com Pte. Ltd. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious, while it appears on 2 security blocklists. The domain holds a Gridinsoft trust score of 0/100, and automated systems like PhishDestroy and ScamSniffer have previously blocked it. Google Safe Browsing status is not explicitly listed, but the domain's offline state suggests takedown efforts. As of the latest verification, amtrixup-tyn.top is offline, likely due to registrar intervention or hosting provider action. However, the domain's recent creation date and low detection rate indicate it may have evaded broader scrutiny. Remaining risk includes potential reactivation under a new IP or registrar, or reuse of the infrastructure for similar phishing campaigns. Organizations should monitor for DNS resolution changes, update blocklists with the provided indicators, and alert users to verify URLs before entering credentials on any account-related pages.