65[.]jj38501[.]vip

Analysis of the domain 65.jj38501.vip indicates that it is actively being used for a phishing operation. The domain is listed on a security blocklist and is currently blocked by the PhishDestroy service, confirming that defensive feeds have identified it as malicious. DNS resolution points to the IPv4 address 20.239.24.219, providing a concrete network indicator that can be used for firewall or proxy filtering.

The domain’s authoritative name servers could not be retrieved (NS_NOT_FOUND), which limits the ability to assess delegation hygiene but also suggests a potentially hastily configured hosting environment. VirusTotal has recorded detections from six out of ninety‑one scanned security vendors, reinforcing the notion that multiple independent scanners have flagged the domain as suspicious. The presence of these detections, combined with the blocklist entry, supports a high‑risk rating for the domain.

No additional metadata such as SSL certificate details, HTTP response codes, page title, or registrar information is available in the supplied intelligence, leaving those aspects unverified at this time. Defenders should immediately block traffic to 65.jj38501.vip at perimeter devices, update intrusion detection signatures with the observed IP address, and monitor for any outbound connections that may attempt to reach the same host. Continuous re‑evaluation is advised, as further crawling or threat‑intel feeds may disclose additional infrastructure components or victim targeting patterns.