jimwalkers[.]com

This domain, jimwalkers.com, was registered through Dynadot LLC on December 6, 2022. It currently resolves to the IP address 104.21.32.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. An HTTP request returns status code 200 and serves a page titled “MINING ETH‑BNB”, indicating a crypto‑mining scam. The site is built with Vue.js and incorporates Facebook Pixel, Cloudflare Browser Insights, and HTTP/3. The TLS certificate is issued by Google Trust Services under the WE1 root. Threat intelligence assigns a high risk rating and classifies the activity as a generic_phishing crypto scam. One of ninety‑five VirusTotal scanners flagged the domain, and it is listed on two public blocklists, including PhishDestroy and ScamSniffer. The Gridinsoft trust score is 0/100, reinforcing the malicious assessment. Defenders should block any DNS resolution to jimwalkers.com and add the associated IP 104.21.32.1 to network deny lists, noting that Cloudflare may host other benign domains. Continuous monitoring of the domain’s certificate and any changes to its hosting infrastructure is advised. Because the site uses legitimate CDN services, signature‑based detection may be limited; therefore, heuristic and reputation‑based controls should be employed. Incident response teams should treat any traffic to this domain as malicious and investigate potential compromise of internal credentials that could be used to access similar crypto‑mining lures.