atlasweb3[.]net

Analysis indicates that atlasweb3.net is an active generic phishing infrastructure first observed after its registration on 21 Dec 2025 through NameMart Pte. Ltd. The domain resolves to the IPv4 address 202.95.13.10 and is served by four authoritative name servers (ns1.domainnamedns.com through ns4.domainname). VirusTotal records show that 2 of 91 scanned security vendors have flagged the domain, and AlienVault OTX lists it in two separate threat‑intelligence pulses, confirming its presence in broader malicious‑activity feeds. The limited public intelligence does not reveal the specific phishing lure, targeted brand, or payload delivered by the site, and no page‑level analysis is available. Consequently, the primary indicators of compromise are the domain name, its IP address, registration details, and the associated name‑server set. Defenders should proactively block or sinkhole atlasweb3.net and its resolving IP, incorporate the domain and name servers into DNS‑filtering and intrusion‑prevention rules, and monitor outbound connections for attempts to reach the listed infrastructure. Continuous re‑evaluation is advised as additional telemetry becomes available.