jn-fc[.]com

Analysis of the domain jn-fc.com, observed on July 25, 2026, indicates that it is currently offline but was previously active as a crypto‑scam infrastructure that impersonates the Sui brand. The domain was registered on August 28, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 35.241.71.125, which belongs to Google LLC (AS396982) and is geolocated in Hong Kong. DNS resolution is served by the authoritative nameservers a10.share-dns.com and b10.share-dns.net. The site employed an SSL certificate issued by Let’s Encrypt (R13), and HTTP responses included HTTP Strict Transport Security (HSTS), suggesting an attempt to appear legitimate.

Technology fingerprinting shows the presence of Vue.js, RxJS, and an Nginx web server, a stack commonly seen in modern web applications. Reputation data shows the domain appears on one security blocklist and has been blocked by PhishDestroy. On VirusTotal, six of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification. The Gridinsoft trust score is recorded as 0 out of 100, indicating a highly untrusted status.

While the offline state prevents direct verification of the current payload, the combination of brand impersonation, crypto‑scam labeling, low trust scores, multiple vendor detections, and blocklist presence provides strong evidence of malicious intent. Defenders should continue to block traffic to 35.241.71.125, add jn-fc.com to internal deny lists, monitor for any re‑activation of the domain or related subdomains, and remain vigilant for phishing attempts targeting users of the Sui platform. Further investigation should focus on any residual DNS records, potential reuse of the hosting infrastructure, and correlation with other observed crypto‑scam campaigns.