jb95[.]top

The domain jb95.top is identified as a high-risk generic phishing domain. No specific brand or drainer kit is associated with this domain, but its registration and infrastructure raise significant concerns.

Infrastructure analysis reveals that the domain is registered through Gname.com Pte. Ltd., a registrar based in Singapore. The domain resolves to the IP address 43.164.2.174, which is located in Thailand (AS132203 Tencent Building, Kejizhongyi Avenue). The domain was created on October 29, 2025, and currently holds an SSL certificate issued by Let's Encrypt. According to VirusTotal, 20 out of 95 security vendors have flagged this domain as malicious, indicating a notable level of suspicion. The domain is also flagged by Google Safe Browsing as a phishing site and appears on one security blocklist.

The domain jb95.top is currently offline, which suggests that it may have been taken down by authorities or the registrar. Despite this, the domain's previous online status and its presence on multiple security lists indicate a high remaining risk. It is recommended that network administrators and security teams continue to monitor this domain and ensure that any related infrastructure is blocked to prevent potential future attacks. Users should be cautious of any emails or messages directing them to this domain and should report any suspicious activity to their IT department.