y32b[.]top

The domain y32b.top was registered through NameMart Pte. Ltd. on June 09, 2026 and is currently active. Passive DNS records show the domain resolving to the IPv4 address 103.244.148.113, hosted on infrastructure that appears to be served by the four nameservers ns1.1111343.com through ns4.1111343.com. The domain is listed on a single public security blocklist, and the anti‑phishing service PhishDestroy has already blocked it. VirusTotal analysis reports that 7 of 91 scanning engines flag the domain as malicious, indicating a consensus of moderate detection across multiple vendors.

No additional public threat intelligence sources such as OTX or Google Safe Browsing are referenced in the available data, and the page title or any SSL certificate details have not been disclosed. Consequently, the exact content and targeted brand, if any, remain unknown. Given the observed indicators—recent creation date, dedicated name‑server set, resolution to a single IP, presence on a blocklist, and multi‑engine detection—the domain should be treated as high‑risk for phishing activity.

Defenders are advised to update egress filtering to deny connections to 103.244.148.113, enforce URL filtering rules that include y32b.top, and monitor DNS logs for any resolution attempts. Incident response teams should also consider adding the domain to internal blocklists and sharing the indicator with upstream threat‑sharing feeds. Continuous re‑evaluation is recommended as further analysis of the web payload and any associated command‑and‑control infrastructure becomes available.