transactions1-esl-org[.]top

Analysis shows that transactions1-esl-org.top was registered through NameSilo, LLC on July 23, 2026 and is currently active. The domain resolves to the IPv4 address 66.55.66.105 and is served by the authoritative name servers ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com. VirusTotal reports that 4 of 91 security vendors have flagged the domain, indicating that multiple detection engines have identified malicious behavior associated with this host. The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy service, confirming its inclusion in active threat mitigation programs.

No additional public intelligence such as SSL certificates, HTTP status codes, or detailed page titles is available at this time. Defenders should immediately add transactions1-esl-org.top and its resolving IP 66.55.66.105 to network deny lists and endpoint web‑filtering rules. Continuous monitoring of the associated name servers and blocklist feeds is recommended to detect any future redeployment of the same infrastructure.

Organizations using threat‑intelligence platforms should ingest the VirusTotal detection count and blocklist indicator to enrich existing phishing detection rules. Given the recent creation date and active status, the domain is likely being used for credential‑harvesting campaigns targeting users who may be lured by deceptive communications. Prompt isolation of traffic to this host will reduce exposure to potential credential theft.