bjl93183[.]cc

This domain, bjl93183.cc, is flagged as a high-risk generic phishing threat as of July 27, 2026, and remains active. Analysis of available intelligence reveals several concerning indicators. The domain was registered on March 21, 2026, through Dominet (HK) Limited, a registrar known for low-cost, privacy-oriented registrations that are often abused by threat actors. Its nameservers (ns1.domainnamedns.com through ns4.domainnamedns.com) are associated with bulk domain hosting and provide limited transparency. The domain resolves to IP address 156.227.122.37, which is currently blocked by PhishDestroy, a third-party security blocklist.

VirusTotal detection shows 4 of 91 security vendors flagging this domain as malicious, indicating moderate but not universal consensus among detection engines. The domain appears on one security blocklist, further corroborating its malicious reputation. No Safe Browsing data, OTX (AlienVault Open Threat Exchange) records, SSL certificate details, HTTP status code, or page title are available in the known intelligence, so the exact content of the hosted site has not been analysed. The absence of a page title or brand target means the phishing campaign cannot be attributed to a specific brand or service; it is classified as a generic phishing operation.

Defenders should treat this domain as actively hostile. Recommended actions include blocking all traffic to bjl93183.cc and its associated IP 156.227.122.37 at the network perimeter, adding the domain to email security filters to prevent link-based attacks, and monitoring internal logs for any connections to this domain. Given the registration date and continued activity, the domain may be used for credential harvesting, malware distribution, or other fraudulent schemes. Regular re-scanning via VirusTotal and other threat intelligence platforms is advised to track any changes in detection status or hosting infrastructure.