j62j[.]vip

Analysis of the domain j62j.vip indicates it is actively associated with phishing activity as of July 17, 2026. The domain was registered on May 17, 2026, through NameMart Pte. Ltd., and currently resolves to the IP address 103.27.177.164. It is flagged by 5 of 95 security vendors on VirusTotal, and AlienVault OTX lists it in 2 threat intelligence pulses, suggesting prior detection in malicious campaigns. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, providing no definitive indication of intent. Infrastructure review shows the domain remains active, with no evidence of takedown or sinkholing. The exact nature of the phishing content is not yet analyzed, as no page title, brand target, or scam kit details were provided. Defenders should treat this domain as high-risk and consider blocking or monitoring traffic to 103.27.177.164. Further investigation into associated URLs, payloads, or redirect chains is recommended to determine the specific threat vector. No attribution to a known threat actor or campaign is available at this time.