19599993333[.]com

Analysis of the domain 19599993333.com, as of July 12, 2026, indicates a high-risk level for generic phishing. The domain was registered on February 21, 2026, through GoDaddy.com, LLC, and currently resolves to the IP address 103.143.28.214, which is located in Hong Kong and associated with the Autonomous System Number (ASN) AS135581 ONL-HK. This domain is actively hosted on Cloudflare's nameservers, alexis.ns.cloudflare.com and blair.ns.cloudflare.com, suggesting a level of technical sophistication or an attempt to appear legitimate by leveraging reputable services. The HTTP status code 302 indicates that the domain is redirecting visitors to another location, which is a common tactic used by phishing sites to mask the true destination of the URL. The exact content of the landing page is not yet analyzed, as the page title is simply 'Loading,' and this lack of information could imply that the site is either under construction or designed to delay detection and analysis. The domain has been flagged by one security blocklist, PhishDestroy, and appears in a threat intelligence pulse on AlienVault OTX, further confirming its involvement in phishing activities. Gridinsoft's trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. Additionally, 13 out of 95 security vendors on VirusTotal have flagged this domain as malicious, which, while not a unanimous decision, is a significant indicator of risk. Defenders should monitor this domain closely and consider blocking it to prevent potential phishing attacks. The use of a default SSL certificate from Default Company Ltd does not provide any additional assurance of the domain's legitimacy and may be an attempt to circumvent basic security checks. Given the domain's active status and the multiple red flags, it is advisable for organizations to educate their users on the signs of phishing and to implement multi-factor authentication to mitigate the risk of credential theft.