jingruijx[.]com

The domain jingruijx.com is currently active and resolves to the IPv4 address 154.198.133.213, which is assigned to AS11427 (Charter Communications) in the United States. Registration records show the domain was created on 2026-02-21 through Gname.com Pte. Ltd., and it is served by the authoritative name servers a6.share-dns.com and b6.share-dns.net. The site presents an HTTP 200 response and uses a generic CDN‑issued SSL certificate labeled "CDN Data Center / CDN Server Data Center," indicating no dedicated certificate for a legitimate brand. The page title returned by the server is "嘉盛集团|全球外汇投资平台-FOREX嘉盛官网," suggesting an attempt to mimic a foreign‑exchange investment platform. VirusTotal analysis recorded a single positive detection out of 95 scanners, and the domain appears on two independent phishing blocklists (PhishDestroy and ScamSniffer). Gridinsoft assigns the domain a trust score of 0 / 100, reinforcing its malicious classification. The observed characteristics align with a social‑media phishing campaign that seeks to harvest credentials by presenting a counterfeit financial service. Defenders should block the domain and its associated IP, update intrusion detection signatures with the observed nameservers and SSL fingerprint, and monitor for any related activity originating from the same hosting provider. Further investigation of the landing page content is required to determine the exact credential‑capture mechanisms employed.