jaileddotfun[.]app

The domain jaileddotfun.app was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (AS13335). DNS resolution points to 104.21.96.78, a Cloudflare edge address located in the United States. The authoritative nameservers are fatima.ns.cloudflare.com and keaton.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate was observed for the site, and the HTTP service is currently offline, suggesting the operator has taken the infrastructure down. A page title retrieved before takedown read “Jailed”, and the site is classified as a brand‑impersonation campaign targeting Signal.

VirusTotal scans show that four of ninety‑three security vendors flagged the domain, and the site appears on a single external blocklist. Independent analysis by Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy lists the domain as blocked. Evidence confirms that the infrastructure leverages a reputable CDN, which can obscure the true origin of the malicious payload. The lack of a valid SSL certificate and the offline status limit immediate technical inspection, and no public Safe Browsing, OTX, or additional vendor reports are available.

Consequently, the full content of the page, the phishing kit used, and any credential‑capture mechanisms remain unknown. Defenders should proactively block jaileddotfun.app at network perimeters and update endpoint protection rules to include the observed IP address 104.21.96.78 and the associated Cloudflare ASN. Monitoring for new domains that resolve to the same Cloudflare edge nodes or that share the same registrar may help identify subsequent campaigns. Given the confirmed impersonation of Signal, security teams should also alert users of the Signal service to verify any unexpected communications and to report suspicious links.