19522[.]com

Analysis of the domain 19522.com shows it is currently active and hosts a web page titled “智能线路选择”. The domain was registered on November 25, 2004 through GoDaddy.com, LLC and continues to resolve to the IP address 151.243.130.149. The IP belongs to AS209242 operated by Cloudflare London, LLC and geolocates to the United States. DNS resolution uses the Cloudflare nameservers dee.ns.cloudflare.com and santino.ns.cloudflare.com. The web server returns HTTP 200 responses and presents a default SSL certificate issued to “Default Company Ltd”, indicating the TLS layer is not uniquely branded. Reputation checks reveal that 18 of 93 VirusTotal scanners have flagged the domain, and it appears on at least one public security blocklist. The site is also listed by PhishDestroy as a blocked resource, and a Gridinsoft trust score of 0 / 100 further confirms a lack of trust. The classification of the domain as a generic phishing infrastructure is supported by the high risk rating and the presence of a page title consistent with phishing campaigns, though the exact content of the page has not been examined. Because the domain is actively serving traffic and is already recognized by multiple security feeds, defenders should block outbound connections to 151.243.130.149 at the network perimeter, add 19522.com to URL filtering policies, and monitor DNS queries for the associated Cloudflare nameservers. Continued surveillance is advised to detect any changes in hosting or content that could indicate escalation.