georgjocham[.]com

Analysis as of July 27, 2026 indicates that the domain georgjocham.com is currently active and exhibits characteristics consistent with a phishing operation. The domain was registered on January 01, 2016 through Hetzner Online GmbH, a provider known for hosting a variety of legitimate and illicit services. DNS resolution points to the IP address 213.133.104.175, and the authoritative name servers listed are ns.second-ns.com, ns1.your-server.de, and ns3.second-ns.de. VirusTotal records show that one out of ninety‑one scanning engines has flagged the domain, confirming that at least one security vendor has observed malicious behavior. The domain is listed on a single public security blocklist and is actively blocked by the PhishDestroy sinkhole, indicating that defensive communities have taken mitigation steps.

No public evidence of SSL/TLS certificates, HTTP response codes, page title, or targeted brand has been released, so the surface‑level characteristics of the hosted content remain undocumented. The lack of additional detections or broader blocklist presence does not imply benign intent; the solitary detection and the existing block by PhishDestroy are sufficient to classify the domain as high‑risk for credential harvesting or related phishing tactics. Defenders should incorporate georgjocham.com and its resolving IP 213.133.104.175 into DNS filtering policies, intrusion‑prevention signatures, and endpoint threat‑intel feeds. Continuous monitoring of DNS queries for the listed name servers can reveal new sub‑domains or pivot activity.

Organizations employing email security gateways should treat any communications referencing this domain as malicious and quarantine or reject them. Because the hosting provider is Hetzner, network‑level blocking at the provider's ASN may also be considered, subject to policy constraints. Regular re‑scanning on VirusTotal or similar platforms is recommended to capture any changes in detection scores.