jojobet-mobilden-girisi[.]live

Analysis as of July 20 2026 indicates that the domain jojobet-mobilden-girisi.live was registered three days ago on July 17 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 188.114.96.3 and is served by Cloudflare nameservers armfazh.ns.cloudflare.com and stephane.ns.cloudflare.com. VirusTotal has recorded a single positive detection out of 91 scanners, and the domain appears on one external blocklist. PhishDestroy has already added the domain to its blocklist, confirming active mitigation by at least one security vendor. The threat type is catalogued as generic phishing and the risk rating is high. The domain remains active, with no publicly available SSL certificate details, HTTP response codes, or page title information at the time of analysis. Consequently, the precise phishing payload or targeted brand cannot be confirmed. Defenders should continue to block resolution to 188.114.96.3, enforce DNS sinkholing for the domain, and monitor outbound traffic for connections to the Cloudflare nameservers listed. Adding the domain to internal blocklists and updating web filtering rules is recommended. Since the domain was created only days ago, its infrastructure may be transient; continuous re‑evaluation of the blocklist status and periodic rescans with VirusTotal or other sandbox services are advised to capture any emerging malicious behavior. Organizations using endpoint protection should treat any detection of this domain as a high‑severity indicator and investigate associated log entries for potential credential harvesting attempts.