jailed[.]app

The domain jailed.app was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently active. DNS resolution points to IP 188.114.97.3, an address owned by AS13335, a large content‑delivery network operating in the United States. The domain serves a 301 redirect and presents an SSL certificate issued by Google Trust Services under the WE1 identifier. Observed infrastructure includes HTTP/3 support, HSTS enforcement, and Cloudflare‑style nameservers (chuck.ns.cloudflare.com, hera.ns.cloudflare.com). The site’s page title is "Jailed" and it is classified as a brand‑impersonation campaign targeting the Signal brand. Threat intelligence indicates the domain is blocked by three independent blocklists (PhishDestroy, MetaMask, SEAL) and appears on three additional security blocklists. A recent scan on VirusTotal resulted in three detections out of ninety‑three scanners. The Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. While the exact phishing payload and user‑facing content have not been publicly disclosed, the combination of brand impersonation, low trust score, and multiple blocklist entries suggests a high‑risk operation. Defenders should add the domain and its associated IP address to deny‑list rules, monitor for outbound connections to the IP, and enforce strict URL filtering for any references to "jailed.app". Continuous re‑evaluation is advised, as additional detections may emerge from future scans.