yusjibtravel[.]ng[.]yusjibtravels[.]com

Analysis of the subdomain yusjibtravel.ng.yusjibtravels.com indicates confirmed brand-impersonation phishing activity as of July 24, 2026. The domain was registered on February 21, 2026, through OwnRegistrar, Inc., a registrar previously associated with high volumes of abusive registrations. Infrastructure analysis reveals nameservers hosted under dns1.webproserver.com and dns2.webproserver.com, a pattern observed in prior phishing campaigns leveraging reseller hosting environments. The domain appears on one security blocklist, specifically PhishDestroy, which classified it as a brand-impersonation scam.

While the site is currently offline, its prior operational status and blocklist inclusion provide concrete evidence of malicious intent. No active detections were recorded by the 93 vendors that scanned the domain on VirusTotal, though the absence of detections does not constitute proof of legitimacy. The SSL certificate, issued under the R11 root, aligns with common phishing infrastructure but lacks unique indicators of compromise.

The scam type, as classified by PhishDestroy, targets unspecified brands, though the exact impersonated entity remains unconfirmed due to the lack of available page content or kit analysis. Defenders should treat this domain as malicious, particularly in environments where brand-impersonation attacks pose a risk. Monitoring for re-registration or re-emergence under similar nameserver patterns is recommended, given the historical use of OwnRegistrar and webproserver.com infrastructure in phishing operations.