atlasmarket[.]top

The domain atlasmarket.top was registered on 2026-02-21 through Global Domain Group LLC. It hosts a page titled "Atlas Market | Stocks Trading and Portfolio Management" and returns an HTTP 302 redirect. VirusTotal scans record 4 of 95 security vendors flagging the domain, and it appears on the PhishDestroy blocklist. The threat classification is generic phishing with a high risk rating and the domain remains active.

Infrastructure analysis shows the domain resolves to 163.61.188.5, an address allocated to AS153568 NEW DHAKA HARDWARE located in the United States. DNS resolution is served by four authoritative servers: dns1.lytehosting.com., dns2.lytehosting.com., dns3.lytehosting.com., and dns (truncated in the source). The site presents a Let’s Encrypt R13 TLS certificate, providing encrypted transport but no additional trust. Observed web components include LiteSpeed web server, Smartsupp chat widget, jQuery, GetButton, and HTTP/3 support, indicating a modern stack that may be leveraged for malicious purposes. An MX record with priority 0 points to atlasmarket.top itself, implying potential use for fraudulent email campaigns. The Gridinsoft trust score of 0/100 further reinforces a malicious reputation.

Defenders should add atlasmarket.top and its associated IP 163.61.188.5 to network and endpoint blocklists, enforce DNS sinkholing where feasible, and configure email gateways to reject or quarantine messages originating from this domain. Ongoing monitoring of traffic to the listed nameservers and vigilance for changes to the TLS certificate are recommended, as threat actors often rotate infrastructure. Because the domain received modest detection on VirusTotal, supplementing signature‑based defenses with heuristic rules that consider the observed technology stack and HTTP 302 behavior can improve early detection and mitigation.