j110x[.]vip

This domain j110x.vip was registered on 29 June 2026 through NameMart Pte. Ltd. and resolves to 154.39.104.142, an address assigned to AS135357 Hong Kong Kowloon Telecommunications Co., Limited. The authoritative nameservers are ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, ns1.dnsbm.com and ns2.dnsbm.com, indicating a multi‑provider setup often used to increase resilience. The site serves HTTP 200 responses, uses a Let's Encrypt certificate (YR1) and presents HSTS, HTTP/3, Nginx and Vue.js in its stack, with Cloudflare front‑end services observed. The page title returned is “welcome‑BET365”, matching the declared impersonation of the Bet365 brand. Threat intelligence classifies the activity as credential phishing targeting Bet365 users; the risk level is high and the domain is currently active. VirusTotal scans have flagged the domain in 20 of 91 security engines, and Gridinsoft rates its trust score at 0/100. The domain appears on one public blocklist and is already blocked by PhishDestroy. Defenders should add the IP and domain to deny lists, monitor DNS queries for the listed nameservers, and enforce MFA and credential‑change policies for any Bet365‑related accounts. Because the underlying payload is not publicly disclosed, further sandbox analysis of the hosted content is recommended to confirm any additional malicious behavior.