jrdb[.]cyxk[.]live

The domain jrdb.cyxk.live was registered on March 03, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to 188.114.96.3, an IP address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No TLS certificate was observed; the service responded without HTTPS. An HTTP request returned a page whose title is "Application placeholder", indicating that no functional content was delivered at the time of analysis.

The site is currently taken offline, and blocklist monitoring shows that PhishDestroy has already added the domain to its repository, with the domain also appearing on a single external blocklist. VirusTotal analysis recorded a single positive detection out of 94 scanning engines, confirming that at least one security vendor classified the domain as malicious. The limited detection count and the absence of additional public intelligence suggest that the activity may be short‑lived or targeted. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, and monitor any future DNS changes that could point the domain to a different IP range.

Because the site currently hosts only a placeholder page, there is no evidence of credential‑harvesting forms or malicious payload delivery, but the presence of a positive detection and blocklist inclusion warrants a precautionary stance. Organizations should update internal threat intel feeds with the indicator set (domain, IP, ASN) and consider adding the domain to email security deny lists. Ongoing observation of the associated IP address for other malicious domains is recommended, as Cloudflare infrastructure is frequently abused for transient phishing campaigns.