p26x[.]top

Analysis of p26x.top indicates an active phishing infrastructure registered on May 18, 2026, through NameMart Pte. Ltd. The domain currently resolves to the IP address 103.27.177.163 and is associated with a Let's Encrypt SSL certificate, suggesting encrypted communications typical of phishing operations. As of July 18, 2026, the domain remains active and is flagged by 12 of 95 security vendors in a recent scan, though the specific detection context—such as payloads, redirect chains, or embedded malicious content—has not been fully analyzed. OpenPhish has blocked the domain, and it appears in two threat intelligence pulses, reinforcing its classification as malicious. The domain is also listed on at least one security blocklist, though the exact criteria for inclusion are not specified. Infrastructure analysis reveals no confirmed brand impersonation or scam type at this stage, as the domain's content has not been examined. The registration details and hosting provider do not present immediate anomalies, but the combination of recent creation, active resolution, and detection by multiple security mechanisms aligns with known phishing patterns. Defenders are advised to treat this domain as high-risk and implement blocking measures at the network and endpoint levels. Further investigation into associated IP infrastructure, SSL certificate reuse, and potential ties to other malicious domains may provide additional context for mitigation efforts. No evidence currently suggests this domain is part of a larger campaign, but its persistence and detection history warrant continued monitoring.