pjcarrental[.]com

Analysis of pjcarrental.com indicates it is an active phishing domain targeting car rental services, first registered on February 21, 2026. As of July 23, 2026, the domain returns an HTTP 302 redirect status, suggesting it is configured to forward visitors to another location, a common tactic in phishing campaigns to obscure the final malicious destination. The domain is hosted on IP 72.10.160.211, located in Canada under AS36666 (GloboTech Communications), a provider frequently observed in phishing infrastructure. SSL certification is provided by Let's Encrypt (R13), a legitimate but often abused certificate authority used to lend credibility to fraudulent sites. Security vendor detections are notable: 14 of 93 vendors on VirusTotal flag the domain as malicious, and it appears on at least one security blocklist.

AlienVault OTX records show the domain in 14 threat intelligence pulses, indicating repeated inclusion in reported phishing or scam activity. The domain was registered through 1API GmbH, a registrar commonly used for both legitimate and malicious registrations. Nameservers are set to ns1am.service-dns.net, ns2am.service-dns.net, and ns3am.service-dns.net, which are not inherently suspicious but are consistent with bulletproof or low-cost hosting configurations. The page title 'Not Found' suggests either a misconfiguration or an attempt to conceal the true content of the site. Technologies detected on the domain include Google Maps, Bootstrap, Apache HTTP Server, OWL Carousel, jQuery Migrate, jQuery, and Popper—tools that are legitimate but frequently leveraged in phishing sites to create convincing facades.

MX records point to the domain itself, which may be used for credential harvesting via fraudulent email campaigns. While the exact brand being impersonated is not confirmed in available data, the domain name and detected technologies align with car rental scams. Defenders should treat this domain as high-risk infrastructure.