b40x[.]top

The domain b40x.top was registered through NameMart Pte. Ltd. on 19 June 2026 and is currently active. Authoritative name servers ns1.1111343.com through ns4.1111343.com resolve the domain to the IPv4 address 103.27.177.163. VirusTotal analysis shows that a single security vendor out of ninety‑one has flagged the domain, indicating limited but present detection. AlienVault Open Threat Exchange lists the domain in two separate threat‑intel pulses, and PhishDestroy has placed it on its blocklist. Additionally, the domain appears on one external security blocklist, reinforcing its malicious reputation. The evidence confirms that b40x.top is being used in a generic phishing campaign, though the specific lure and target pages have not been publicly disclosed. Uncertainties remain regarding the content hosted at the IP address, the presence of TLS certificates, and any additional detection by other sandbox or reputation services not referenced in the current intelligence. Defenders should proactively block DNS resolution for b40x.top, add the associated IP address 103.27.177.163 to network‑level deny lists, and monitor for outbound connections to the identified nameservers. Continuous re‑scanning with multi‑engine scanners is advised to capture any evolving payloads, and security teams should incorporate the domain into phishing‑specific detection rules given its confirmed classification.