p38k[.]top

Analysis indicates that the domain p38k.top was registered on 2026-07-07 through NameMart Pte. Ltd. and resolves to the IPv4 address 45.196.247.166. The domain remains active as of the 2026-07-19 assessment. VirusTotal reports that seven of ninety‑five scanned security vendors have flagged the domain, suggesting a presence of malicious activity. No public page content has been disclosed, and the exact phishing campaign details, including the targeted brand or credential‑capture mechanism, are currently unknown. The rapid creation date and immediate activation are consistent with a short‑lived phishing infrastructure. Defenders should add p38k.top to block lists at network perimeter and DNS filtering points, monitor for DNS queries to the associated IP, and consider sinkholing or null‑routing the address where possible. Continuous re‑scanning of the domain on threat‑intel platforms is recommended to capture any changes in detection status. Organizations should also educate users about unsolicited communications that may reference the domain, emphasizing verification of URLs before entering credentials.