h36d[.]top

The domain h36d.top was registered on July 09 2026 through NameMart Pte. Ltd. and currently resolves to the IPv4 address 154.39.104.142. VirusTotal reports that eight of ninety‑five scanning engines have flagged the domain, indicating a level of malicious confidence. The domain is classified as a generic phishing site and its status remains active as of the report date, July 19 2026. No additional intelligence such as page titles, brand targets, or malware kits has been published, so the exact payload or credential‑harvesting strategy cannot be confirmed at this time. The available evidence suggests that the infrastructure is being used to lure victims into providing login credentials or personal data. Defenders should add h36d.top to blocklists, monitor outbound connections to 154.39.104.142, and incorporate the indicator into security information and event management (SIEM) correlation rules. Continuous re‑scanning of the domain on threat‑intel platforms is advised to capture any evolution in its detection profile.