# 1125xpj.com — MALICIOUS

> 1125xpj.com is an active phishing site flagged by several security tools. Avoid sharing personal info and verify site legitimacy before proceeding.

## Summary
PhishDestroy identifies 1125xpj.com as a medium-risk generic phishing domain. This type of threat attempts to deceive users into revealing sensitive information such as passwords or financial details by masquerading as a trustworthy website. The continued activity of this domain highlights ongoing risks for users who encounter it, emphasizing the need for vigilance when interacting with unfamiliar sites.

The domain 1125xpj.com was created recently on December 26, 2025, and is registered through Spaceship, Inc., a registrar sometimes used by malicious actors. It resolves to IP address 172.67.155.124 and has been flagged by 3 out of 95 security vendors on VirusTotal, indicating some detection but not unanimous consensus. This partial detection suggests the infrastructure may be evolving or attempts at evasion exist, warranting continued monitoring.

Users advised to avoid entering personal or financial information on 1125xpj.com or any site they suspect of phishing. Employing multi-factor authentication and using reputable security solutions can provide additional layers of defense. If you suspect a site is unsafe, report it to your security team or use official channels to verify its legitimacy before proceeding. PhishDestroy recommends caution and routine checks on new or suspicious domains like 1125xpj.com to mitigate potential risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Welcome

## Domain Intelligence
- Registered: 2026-03-03 23:07:02
- Registrar: Spaceship, Inc.
- IP: 172.67.155.124
- Nameservers: jill.ns.cloudflare.com roman.ns.cloudflare.com

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "SOCRadar", "Sophos", "Trustwave", "VIPRE", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Welcome ● 请选择访问方式 AG 2004–2026 · 品牌运营，请按网络环境选择线路。 正在准备 ... 继续访问 线路 A（推荐） 线路 B（备用） 若无法打开，请尝试切换线路或使用主流浏览器稍后再试。 © 2026 Navigation Page

### External Links
- https://35.241.72.140:31275/mktland
- https://m.804507.com/mktland
- https://35.241.72.140:31273/mktland

## Evidence
- Screenshot: https://i.ibb.co/wrWtxJR3/bfa8faef205e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5df327e1-aad6-4688-b0bb-4366ce16b05f
- PhishDestroy: https://phishdestroy.io/domain/1125xpj.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/1125xpj.com/
Last updated: 2026-03-14