# jjffwr.lucyor.com — SUSPICIOUS

> Domain jjffwr.lucyor.com is a fake login portal phishing site with 0/95 VirusTotal detections. Users should avoid entering credentials and check their accounts.

## Summary
PhishDestroy identifies jjffwr.lucyor.com as a fake login portal actively distributing phishing pages. This domain mimics legitimate services to steal user credentials and should be treated as a high-risk threat until further analysis is complete.  This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it remains under the radar despite its active status. Registered through Gname.com Pte. Ltd. on July 22, 2020, this domain resolves to IP 104.21.32.165 and uses a Let's Encrypt SSL certificate to appear legitimate.  If you visited this site, do not enter any login credentials, personal information, or payment details. Disconnect from the network immediately and monitor your accounts for unusual activity. Run a malware scan on your device and consider changing passwords for sensitive accounts if you used this domain. Report this domain to your security team or use a phishing reporting tool to help block further attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2020-07-22 18:19:41
- Registrar: Gname.com Pte. Ltd.
- IP: 104.21.32.165

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e2641a28-fea8-448e-858f-128d8e162953
- PhishDestroy: https://phishdestroy.io/domain/jjffwr.lucyor.com/
- LLM endpoint: https://phishdestroy.io/domain/jjffwr.lucyor.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jjffwr.lucyor.com/
Last updated: 2026-03-23