h19z[.]top

Analysis of h19z.top shows a newly registered domain (creation date May 18 2026) that is currently active and hosted on IP 103.27.177.163. The domain is delegated to four nameservers (ns1.ns2.ns3.ns4.1111343.com), a pattern commonly observed in infrastructure used for rapid deployment of malicious sites. Registration was performed through NameMart Pte. Ltd., a registrar often associated with short‑lived domains. VirusTotal scans have returned 15 detections out of 91 security vendors, indicating that multiple independent scanners have identified the domain as malicious. The threat type is classified as generic_phishing, and the risk level is high. No public page content, branding, or specific lure details have been disclosed, so the exact phishing payload remains unknown. Defenders should treat h19z.top as a hostile endpoint: block the domain and its associated IP at network perimeters, add the domain to DNS‑based blocklists, and monitor for any outbound connections to the IP address. Further investigation of the web content, TLS certificates, and any observed traffic patterns is advised to refine detection rules and confirm the phishing workflow.