jojobet-mobilden-erisimi[.]icu

Analysis of jojobet-mobilden-erisimi.icu indicates a recently registered domain exhibiting characteristics consistent with phishing activity. The domain was created on July 17, 2026, through registrar NICENIC INTERNATIONAL GROUP CO., LIMITED. Infrastructure analysis reveals Cloudflare nameservers (chris.ns.cloudflare.com and gail.ns.cloudflare.com) and resolution to IP address 172.67.144.153. As of July 20, 2026, the domain remains active and has been flagged on one security blocklist, specifically PhishDestroy. No detections were recorded among 91 vendors in a VirusTotal scan, though the absence of detections does not confirm safety. The domain's name suggests an attempt to impersonate a mobile access portal, though the exact content and target brand have not yet been analysed. Defenders should treat this domain as suspicious pending further investigation. Network security teams are advised to monitor for connections to 172.67.144.153 and consider blocking the domain at perimeter controls. The domain's recent registration and use of Cloudflare infrastructure align with common phishing tactics to evade detection and maintain operational security. Additional analysis of page content and potential brand impersonation is recommended to determine the full scope of the threat.