j72j[.]vip

This domain is flagged as an elevated-risk credential phishing site specifically targeting users of the BET365 platform. Analysis of the page title, 'welcome-BET365,' indicates an intent to deceive visitors into believing they are accessing a legitimate betting service, likely to harvest login credentials or financial information.

Infrastructure analysis reveals the domain was registered through NameMart Pte. Ltd. and resolved to the IP address 154.39.104.130, hosted under AS133199 (SonderCloud Limited) in the United States. The domain was created on May 27, 2026, and is currently offline. It appears on one security blocklist and is flagged by 20 out of 95 security vendors on VirusTotal. The SSL certificate is issued to 'Default Company Ltd,' a common indicator of low-trust or hastily deployed phishing infrastructure.

Mitigation for this threat type includes immediate blocking of the domain and associated IP address across network security controls. Organizations should monitor for any attempts to access this domain from internal networks and conduct user awareness training focused on recognizing phishing attempts targeting online betting platforms. Endpoint detection systems should be updated to include the domain, IP, and SSL certificate details as indicators of compromise. Given the domain's current offline status, continuous monitoring for re-activation or similar infrastructure is recommended.