jitsi[.]midnight-sojourn[.]com

This domain is flagged as an elevated-risk phishing site specializing in brand impersonation, specifically targeting Barclays Bank. The fraudulent infrastructure mimics legitimate banking portals to harvest credentials, as evidenced by the page title 'Home — Barclays Bank' and the domain’s operational context. Analysis indicates a deliberate attempt to deceive users into disclosing sensitive financial information under false pretenses. Infrastructure analysis reveals the domain jitsi.midnight-sojourn.com was registered on July 28, 2020, through Squarespace Domains II LLC. It resolves to the IP address 164.90.146.20, hosted on AS14061 (DigitalOcean, LLC) in the United States. The domain appears on two security blocklists and is flagged by 18 out of 95 security vendors on VirusTotal. Detection engines including PhishDestroy and PhishingDB have classified this as malicious. The SSL certificate, issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36), provides a superficial layer of legitimacy but does not mitigate the underlying threat. Mitigation measures for this brand impersonation threat include immediate domain takedown requests to the registrar and hosting provider, as well as blacklisting the IP address 164.90.146.20 across security gateways. Financial institutions and end-users should be alerted to verify domain authenticity before entering credentials, particularly for domains mimicking official branding. Security teams are advised to monitor for similar impersonation attempts using the same registrar or hosting infrastructure, as threat actors frequently reuse proven tactics. Blocking access to the domain at the network level and educating users on recognizing fraudulent login pages are critical steps to prevent credential compromise.