p31y[.]top

Analysis of p31y.top indicates an active high‑risk phishing infrastructure. The domain was registered on 2026‑06‑09 through NameMart Pte. Ltd. and is serviced by four nameservers (ns1‑ns4.1111343.com). DNS resolution points exclusively to IP address 103.27.177.163, which serves as the sole host for the observed activity. VirusTotal scans have recorded nine detections out of ninety‑one security engines, reinforcing the malicious classification. Current intelligence confirms the site remains operational as of 2026‑07‑15. While the content of the landing page has not been publicly disclosed, the presence of multiple detections and the dedicated IP suggest a purposeful phishing campaign. Defenders should block outbound connections to 103.27.177.163, add p31y.top to URL filtering lists, and monitor for related traffic patterns. Additional investigation of the hosting provider and nameserver infrastructure may reveal further associated assets. Until the site is taken down, organizations should treat any email or credential request referencing p31y.top as malicious.