api[.]jhiconline[.]com

PhishDestroy identifies jhiconline.com as an elevated-risk credential theft phishing domain, currently offline. This specific threat type involves tricking users into entering login credentials, often by mimicking legitimate services. The domain was created on February 21, 2026, and registered through GoDaddy.com, LLC, with an IP address of 109.203.118.161. VirusTotal reports 9 out of 95 security vendors flagging it as malicious, and it appears on one security blocklist. The SSL certificate was issued by Sectigo Limited, which may lend a false sense of legitimacy. Despite being taken offline, the domain's recent creation and high vendor detection rate underscore its malicious intent.

Given the credential theft nature, users should never enter passwords or personal information on any page resembling this domain. If any credentials were entered, they must be changed immediately on the legitimate sites. Enable two-factor authentication on all accounts and monitor for suspicious activity. Use a password manager to avoid reusing credentials. Report any phishing attempts to relevant authorities. Stay vigilant against similar domains that may appear in the future.