j65n[.]vip

This domain, j65n.vip, was registered on 2026-05-18 through NameMart Pte. Ltd. and is currently resolvable to the IPv4 address 103.27.177.163. The domain is served by four authoritative name servers (ns1‑ns4.1111343.com), indicating a shared hosting environment often leveraged for malicious campaigns. As of the analysis date, the domain remains active and has been observed by VirusTotal, where 5 of 91 security vendors flagged the host, supporting a high‑risk assessment. The relatively recent creation date combined with the presence of multiple name servers and a single IP point suggests an opportunistic phishing infrastructure likely used for credential harvesting. No additional public content, page titles, or target brands have been disclosed, so the exact spoofed service cannot be confirmed at this time. Defenders should consider adding j65n.vip to network blocklists, monitor DNS queries for the associated name servers, and enforce outbound traffic controls to the identified IP. Continuous re‑evaluation is advised in case additional detections emerge.