jetxfrance[.]com

Analysis of jetxfrance.com shows a newly registered domain (created 27 Mar 2026) owned by NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to 188.114.97.3, an address operated by Cloudflare, Inc., and uses the Cloudflare nameservers hasslo.ns.cloudflare.com and kinsley.ns.cloudflare.com. HTTPS is enabled with a certificate issued by Google Trust Services / WE1, indicating a valid TLS handshake. An HTTP request returns a 403 status and the only observable page title is "Just a moment...", suggesting that the site is currently restricting access or serving a placeholder page. The domain is listed in a single AlienVault OTX pulse and appears on one public blocklist (PhishDestroy). It is classified as a credential‑phishing site, though the exact phishing page content has not been captured. VirusTotal reports that 94 scanners have examined the site without flagging malicious payloads, but the absence of detections does not constitute a safety assurance. The risk level is marked under investigation and the domain remains active. Defenders should proactively block jetxfrance.com at DNS and network layers, monitor for any changes in HTTP response codes or page content, and incorporate the domain into email filtering rules to prevent credential harvesting attempts. Continuous observation of the associated IP address and any new threat intelligence references is recommended to assess escalation.