jeyciapiworkings[.]live

This report analyzes the domain jeyciapiworkings.live, which is assessed as a high-risk threat. The site's page title explicitly advertises access to "Darknet Forum Forum Links | Torzon | Nexus | DrugHub | Market," indicating it is a platform designed to aggregate and facilitate access to illicit darknet marketplaces and forums. This poses a direct threat to network security by providing users with links to criminal marketplaces for drugs, stolen data, and hacking services, potentially leading to legal liability, malware infection, and data breaches.

Technical analysis confirms the malicious nature of the domain. VirusTotal reports 3 detections out of 95 scanners, with flags from Fortinet, Gridinsoft, and SOCRadar. The domain is listed on 1 blocklist. It was registered on 2026-02-21 through NiceNIC International Group Co., Limited, a registrar commonly associated with high-risk domains. The IP address 188.114.96.3 is hosted in the United States by AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, and nameservers are courtney.ns.cloudflare.com and dax.ns.cloudflare.com.

The domain is currently DOWN/OFFLINE, which may indicate it has been taken down by authorities or the hosting provider. Despite its inactive status, the risk level remains high due to the clear illicit nature of the site's advertised content. The combination of a very recent creation date, low but notable antivirus detections, blocklist presence, and use of a risk-prone registrar strongly suggests this domain was created specifically for malicious activity. It should be permanently blocked and monitored for any future reactivation.