jojobet-mobilden-erisimleri[.]vip

The domain jojobet-mobilden-erisimleri.vip was registered on July 31, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Within days of its creation the domain was added to a security blocklist and subsequently blocked by the PhishDestroy mitigation service. The blocklist entry is currently the sole public indicator of malicious use, and no additional intelligence sources have reported the domain.

A VirusTotal scan performed by 91 antivirus and URL‑reputation engines returned no positive detections at the time of analysis; while this indicates that the scanned payloads did not match known signatures, the absence of detections does not confirm that the domain is benign. No public information about the hosting IP address, ASN, geographic location, SSL certificate details, HTTP response codes, or page title is available in the supplied data set, leaving the underlying infrastructure largely opaque. The limited visibility suggests that the domain may be part of a short‑lived phishing campaign that relies on rapid deployment and early takedown by sink‑hole or blocklist operators.

Defenders should proactively block jojobet-mobilden-erisimleri.vip at perimeter firewalls, DNS filtering solutions, and endpoint protection suites. Continuous monitoring of the domain’s DNS records, WHOIS changes, and any future VirusTotal or sandbox submissions is recommended to detect potential escalation or re‑use. Given the recent creation date and immediate blocklist presence, the domain should be treated as a high‑confidence phishing indicator until further evidence either confirms or refutes ongoing malicious activity.