jojobet-2026engunceladresim[.]vip

The domain jojobet-2026engunceladresim.vip was registered on July 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IP address 104.21.9.102. The authoritative name servers are norman.ns.cloudflare.com and wanda.ns.cloudflare.com, indicating that the domain is serviced by Cloudflare’s DNS and edge network. As of the report date, July 20, 2026, the domain is listed on one public security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis shows that three out of ninety‑one scanned security vendors have flagged the domain, providing additional corroboration of malicious intent. The domain’s age is less than a week, a characteristic often observed in fast‑flux phishing campaigns that rely on newly‑created domains to evade reputation systems. No public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content of the hosted site unverified. The limited detection footprint—only a single blocklist entry and three vendor flags—suggests that the infrastructure may be in early deployment or intentionally low‑profile. Defenders should proactively block or sinkhole the domain, monitor DNS queries for the associated Cloudflare name servers, and add the IP address 104.21.9.102 to network‑level deny lists. Ongoing observation of VirusTotal and other reputation feeds is recommended to capture any escalation in detection counts or additional blocklist inclusions.