jbcmigrates[.]live

The domain jbcmigrates.live was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently active. DNS resolution points to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., locating the host in the United States. The site is served behind Cloudflare, employing HSTS, Cloudflare Browser Insights, and HTTP/3, and presents a Google Trust Services / WE1 SSL certificate. Nameservers are alan.ns.cloudflare.com and veda.ns.cloudflare.com. A Gridinsoft trust score of 0/100 and a VirusTotal detection rate of 5 of 93 scanners indicate a malicious reputation. The HTTP response is a 403 status code, and the page title returned is "Un instant…". The domain is listed on at least one security blocklist and has been blocked by PhishDestroy. While the exact phishing campaign details (targeted brand, credential‑stealing page, or payload) have not been disclosed, the observable infrastructure—recent registration, Cloudflare front‑end, low trust score, and multiple security vendor flags—confirms a high‑risk malicious operation. Defenders should proactively block traffic to jbcmigrates.live at the DNS and network layers, monitor for any related C2 communications, and consider adding the domain to internal blocklists. Continuous threat‑intel feeds should be consulted for any emerging indicators that may reveal the specific phishing lure or compromised accounts associated with this infrastructure.