tuntunsahur[.]top

Analysis of tuntunsahur.top, registered on April 24, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, indicates active infrastructure supporting a generic phishing campaign. The domain resolves to the IPv4 address 91.92.243.12 and is serviced by four nameservers (ns1.silkguard.net, ns1.silkguard.org, ns2.silkguard.net, ns2.silkguard.org). VirusTotal scans show that 2 of 91 security vendors have flagged the domain, confirming the presence of malicious activity. The high risk rating and active status suggest the domain is currently being used for malicious purposes. No additional content analysis is available, so the specific phishing payload or targeted brand cannot be confirmed at this time. Defenders should consider blocking DNS resolution to this domain, monitoring outbound traffic for connections to the listed IP address, and updating intrusion detection signatures to include the observed nameserver pattern. Continuous re‑evaluation is advised as further threat intelligence may emerge.