h19x[.]top

This domain, h19x.top, is flagged for brand impersonation phishing targeting Ethereum, a major cryptocurrency platform. The page title, 'welcome-BET365,' suggests an attempt to deceive users by mimicking a well-known betting brand, though the primary target remains Ethereum-related credentials or assets. No drainer kit has been explicitly identified, but the infrastructure aligns with typical phishing campaigns aimed at cryptocurrency theft or fraudulent transactions.

Infrastructure analysis reveals the domain was registered through NameMart Pte. Ltd. and currently resolves to the IP address 14.128.63.51. It was created on May 18, 2026, and has been detected by 17 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and is not protected by an SSL certificate, increasing its risk profile. Google Safe Browsing (GSB) status remains unconfirmed, but the lack of encryption and active detections indicate a high likelihood of malicious intent.

As of the latest assessment, h19x.top remains active and operational, posing an ongoing threat to users. Response actions should include immediate blocking of the domain and IP address, along with monitoring for related infrastructure. Despite its detection by multiple security vendors, the domain continues to evade takedown, highlighting the persistent risk of cryptocurrency-focused phishing campaigns. Users and organizations are advised to treat this domain as hostile and implement strict access controls to prevent exposure.