jb3510[.]cc

Analysis of jb3510.cc indicates a high‑risk, active phishing infrastructure. The domain was registered on February 21, 2026 through NameCheap, Inc. and resolves to IP 182.16.17.115, which is assigned to Netsec Limited in Hong Kong (AS45753). DNS is hosted on Cloudflare, using the nameservers dalary.ns.cloudflare.com and johnny.ns.cloudflare.com. The web server stack consists of Nginx with OpenResty and a Vue.js front‑end, secured by a Let’s Encrypt certificate (R13). The site returns HTTP 200 and presents the page title “金贝娱乐”, but its actual content has not been publicly disclosed. The domain appears on one security blocklist and is listed by PhishDestroy. It has been referenced in a single AlienVault OTX pulse and received eight detections from 93 VirusTotal scanners, indicating moderate detection by security vendors. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. While the precise phishing lure (e.g., credential harvesting, financial fraud) cannot be confirmed without page content analysis, the combination of a recent registration, active SSL, and presence on blocklists aligns with typical phishing campaigns. Defenders should block jb3510.cc at network perimeter and DNS layers, monitor for any outbound connections to the associated IP, and update threat intelligence feeds to include this indicator. Continuous observation is recommended to capture any evolution of the site’s payload or target list.