30pj8[.]net

This domain is flagged as a generic phishing threat with a high risk level and remains active as of July 12, 2026. The domain 30pj8.net was registered on March 3, 2026, through Dynadot LLC, and its nameservers are ns7.alidns.com and ns8.alidns.com. It resolves to IP address 20.255.104.129, located in Hong Kong and associated with AS8075 (Microsoft Corporation). The server responds with HTTP status 200, and the page title is '验证' (Chinese for 'verification'), suggesting the site may present a verification page, though the exact content has not been analyzed. The domain uses an SSL certificate from Let's Encrypt (R12). Security vendor detection is moderate: VirusTotal reports 7 out of 95 vendors flagging the domain. The domain appears on 1 security blocklist and is referenced in 24 threat intelligence pulses on AlienVault OTX, indicating active monitoring by multiple threat intelligence sources. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of malicious intent. Technologies detected include jQuery UI, jQuery CDN, and jQuery, which are common front-end frameworks. The domain is blocked by PhishDestroy. Defenders should treat this domain as actively hostile, block all outbound traffic to it, and monitor logs for any prior connections. Given the generic nature of the threat, no specific brand or scam type is identified, but the Chinese-language title and recent registration pattern are consistent with credential harvesting or verification-themed phishing campaigns. Further investigation, such as manual browsing or sandbox analysis, is recommended to confirm the exact phishing kit or target.