jordanibk[.]com

PhishDestroy identifies jordanibk.com as an active, under-investigation phishing threat currently posing as a banking portal. The domain is not yet flagged by VirusTotal vendors (1/95) but exhibits multiple red flags consistent with fraudulent activity targeting financial credentials.

This domain was flagged by PhishDestroy as a generic phishing attack vector on January 15, 2025. Key technical indicators include registration through COSMOTOWN, INC., IP resolution to 163.61.188.7, and a domain creation date of December 23, 2024. The SSL certificate issued by Let’s Encrypt complicates detection. As of this report, the domain remains unlisted by major threat intelligence platforms, with zero detections across 95 VirusTotal vendors and no known entries in blocklists or trust score databases. This latency in detection increases risk exposure for potential victims.

The threat level remains under active investigation but poses immediate danger to unsuspecting users. PhishDestroy recommends immediate blocking of jordanibk.com at the network perimeter and DNS level. Users should avoid accessing the domain and verify banking login portals through official, pre-bookmarked URLs. Financial institutions should monitor for fraudulent credential harvesting attempts linked to this domain. All security teams are advised to update threat intelligence feeds with this domain’s indicators and conduct endpoint scans for related artifacts.