jesol[.]cc

Analysis of the domain jesol.cc, observed as of July 22, 2026, identifies it as a confirmed crypto‑related phishing resource. The site is hosted behind Cloudflare infrastructure (ASN 13335) and resolves to the IP address 104.21.27.64, which is geolocated to the United States. Registration data shows the domain was created on October 29, 2025 and is listed with PDR Ltd. d/b/a PublicDomainRegistry.com; its authoritative name servers are fonzie.ns.cloudflare.com and luciana.ns.cloudflare.com. No TLS certificate is presented, indicating the service is delivered over plain HTTP.

The page title returned by the server, "Just a moment...", provides limited context and no additional content was captured before the service was taken offline. VirusTotal scans have recorded four detections out of ninety‑five scanners, confirming malicious classification by multiple vendors. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy platform.

Current status is offline, limiting immediate threat exposure, but the infrastructure details suggest the operator relied on reputable CDN services to obscure origin. Defenders should continue to monitor the IP address 104.21.27.64 for any re‑use, enforce blocking of the domain at perimeter devices, and include the registrar and name server pair in threat‑intel feeds. Additional observation is needed to determine whether the underlying payload or campaign infrastructure persists elsewhere, as the available evidence is limited to registration and host‑level indicators.