jkglobalengineers[.]com

The domain www.jkglobalengineers.com is a generic phishing site posing an elevated risk of credential theft or malware distribution. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, the site has been taken offline, though prior activity indicates it was actively used for phishing campaigns.

Technical analysis shows that www.jkglobalengineers.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). Google Safe Browsing did not flag the domain. It was registered through Global Domain Group LLC on September 16, 2009, and resolved to the IP address 161.97.138.15, hosted by Contabo GmbH in France (AS51167). The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was '509 Bandwidth Limit Exceeded.' Detected technologies include WordPress, MySQL, PHP, Bootstrap, Nginx, Cloudflare, Slick, and Lightbox. MX records point to jkglobalengineers.com with a priority of 0, and nameservers are ns1.lwegatech.info, ns2.lwegatech.info, and ns3.lwegatech.info.

Individuals who may have interacted with www.jkglobalengineers.com should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized activity. If financial or login details were exposed, watch for signs of fraud, such as unauthorized transactions or account lockouts. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or local cybercrime units. Additionally, notify the registrar (Global Domain Group LLC) of the abuse.