fluxjump[.]za[.]com

fluxjump.za.com is currently listed as an active generic phishing site. The HTTP response returns status 200 and the page title is “Bulletproof Hosting”, indicating the operator advertises resilient hosting services often associated with malicious activity. The domain resolves to 66.116.197.215, an address allocated to AS31898 owned by Oracle Corporation and geolocated to India. The hosting infrastructure uses nameservers ns1.bloomforge.digital and ns2.bloomforge.digital, both publicly resolvable. The TLS certificate is issued by Let’s Encrypt (R13) and is valid for the domain, confirming the site is reachable over HTTPS. Reputation services assign extremely low scores: Gridinsoft reports 0 out of 100 and Scamadviser 1 out of 100, reflecting a near‑zero trust rating. VirusTotal analysis shows 12 of 95 scanned security vendors flag the domain as malicious, and the domain appears on two independent phishing blocklists (PhishDestroy and PhishingDB). The risk level is marked high, and the seed indicates a unique identifier for this campaign. No additional content analysis is available beyond the page title, so the specific phishing lure or credential‑harvesting mechanism remains unconfirmed. Defenders should immediately block both the domain and its resolved IP address at network perimeters. Adding the nameservers to threat‑intel feeds can aid in detecting related infrastructures. Continuous monitoring of the SSL certificate and DNS records is advised to catch any rapid changes. Organizations should also update email filtering rules to flag messages that reference this domain or its associated hosting terminology.