jb3516[.]cc

The domain jb3516.cc was registered on February 21, 2026 through NameCheap, Inc. and currently resolves to the IPv4 address 182.16.17.115, which is announced by AS45753 Netsec Limited and geolocated to Hong Kong. The site presents an HTTP 200 response and serves content over a Let's Encrypt certificate (R13), indicating a valid TLS handshake. Infrastructure analysis shows the web server stack consists of Nginx, OpenResty, and a Vue.js front end, while DNS is delegated to two Cloudflare name servers (dalary.ns.cloudflare.com and johnny.ns.cloudflare.com). Threat intelligence sources have flagged the domain as a generic phishing operation: VirusTotal records seven positive detections out of ninety‑five scanners, it appears on a single security blocklist, and it is listed in one AlienVault OTX pulse. The domain is also blocked by PhishDestroy and has a Gridinsoft trust score of 0 out of 100, reinforcing its malicious reputation. The page title returned by the server is "金贝娱乐", but no further content analysis is available, leaving the specific target of the impersonation unconfirmed. Defenders should add jb3516.cc to URL filtering and DNS block lists, monitor for connections to 182.16.17.115, and ensure that any email or web traffic referencing the title "金贝娱乐" is inspected for potential credential harvesting. Ongoing observation is advised to capture any evolution of the payload or additional infrastructure components.