de-jktopgamebox[.]shop

This domain, de-jktopgamebox.shop, is flagged as a generic phishing site targeting users through fraudulent game reward schemes. Analysis indicates no direct association with known brand impersonation or drainer kits, though the infrastructure mimics legitimate gaming portals to harvest credentials or payment details. The threat type aligns with opportunistic phishing campaigns exploiting user interest in gaming bonuses or in-game currency offers. Infrastructure analysis reveals the domain resolves to IP address 172.67.193.174, protected by Cloudflare’s network and utilizing HTTP/3 protocols. The SSL certificate is issued by Google Trust Services, a common obfuscation tactic to appear legitimate. Created on June 12, 2026, the domain is detected by 5 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on one security blocklist and is currently blocked by PhishDestroy. The registrar details remain undisclosed, but the creation date suggests recent deployment for short-term malicious activity. The domain is currently offline, displaying a 523 error indicating origin server unreachability. While this reduces immediate risk, historical indicators and vendor detections confirm prior malicious activity. Remaining risks include potential reactivation under the same infrastructure or migration to new domains with identical phishing templates. Users are advised to verify gaming reward offers through official channels and monitor for unauthorized account access. Security teams should update blocklists with the domain and IP to prevent future exposure.