jojobet-mobil-erisimler[.]live

This domain, jojobet-mobil-erisimler.live, was registered on July 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED and remains active as of July 20, 2026. Infrastructure analysis reveals Cloudflare nameservers (armfazh.ns.cloudflare.com, stephane.ns.cloudflare.com) and resolution to IP 104.21.86.15, a common hosting pattern for phishing campaigns leveraging Cloudflare’s proxy services to obscure origin infrastructure. The domain appears on one security blocklist, specifically PhishDestroy, but currently shows no detections from the 91 vendors that scanned it on VirusTotal. The absence of detections does not confirm safety, as phishing domains often evade initial scans or are flagged only after prolonged exposure. No brand, scam type, or page content has been confirmed in available data, limiting classification to a generic phishing domain under investigation. Defenders should treat this domain as suspicious based on its recent registration, Cloudflare proxy usage, and blocklist inclusion. Recommended actions include monitoring for additional blocklist additions, correlating with network logs for connections to 104.21.86.15, and implementing real-time URL filtering to prevent user access. Further analysis of HTTP headers, SSL certificates, or page content may provide additional indicators, but no such data is currently available.