1125xpj[.]com

This domain, 1125xpj.com, is currently flagged as an active phishing threat by multiple security sources. Registered on March 3, 2026, through a domain registrar, the site remains operational as of July 12, 2026. Infrastructure analysis reveals it is hosted behind Cloudflare, resolving to the IP address 172.67.155.124, and employs technologies including Cloudflare Browser Insights and HTTP/3. The SSL certificate is issued by Google Trust Services, which may contribute to its appearance of legitimacy to unsuspecting users. The domain appears on two security blocklists and has been included in 24 threat intelligence pulses, indicating widespread recognition of its malicious nature. Twelve out of ninety-five security vendors on a collective scanning platform have flagged this domain, reinforcing its classification as a high-risk threat. The page title, 'Welcome,' provides no specific indication of the targeted brand or scam type, and no further content analysis has been conducted to determine the exact nature of the phishing attempt. Defenders should treat this domain as an active threat. The use of Cloudflare infrastructure may complicate takedown efforts, but network-level blocking of the IP address 172.67.155.124 and domain-based filtering are recommended. Given its presence on multiple blocklists and its detection by security vendors, organizations should prioritize monitoring for any connections to this domain within their environments. The exact phishing methodology remains unconfirmed, but the domain's persistence and technical setup suggest it is designed to evade casual detection while targeting users through deceptive means.