s23m[.]top

The domain s23m.top is currently classified as a high-risk generic phishing threat based on multiple corroborated indicators. It is listed on at least one major security blocklist, with OpenPhish actively blocking the domain. VirusTotal results show that 14 out of 95 security vendors have flagged s23m.top, reinforcing its association with phishing activity. The domain resolves to IP address 103.27.177.163 and utilizes a Let's Encrypt SSL certificate, which is commonly used but does not guarantee legitimacy. Registration occurred on May 18, 2026, and the domain remains active as of July 18, 2026. The registrar is NameMart Pte. Ltd. No specific scam category, target brand, or detailed site content has been analyzed; the threat classification is based solely on blocklist and detection evidence. Defenders should treat all traffic to s23m.top as suspect, block access at the network perimeter, and monitor for related infrastructure. Further investigation is recommended if any internal activity is observed, as the domain's recent creation and active status suggest ongoing malicious operations. No additional infrastructure or campaign details are available at this time.