cpanel[.]instalacionesjm[.]com[.]mx

This domain, cpanel.instalacionesjm.com.mx, is currently classified as a high‑risk generic phishing site and remains active as of the report date, 25 July 2026. VirusTotal analysis shows that nine out of ninety‑one scanning engines have flagged the domain as malicious, indicating a consensus among multiple security vendors that the site is being used for deceptive purposes. An HTTP request to the host returns a 200 OK status, confirming that the web server is reachable and serving content. Google Safe Browsing has labeled the URL with a social‑engineering warning, reinforcing the phishing characterization.

The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, demonstrating that at least one dedicated anti‑phishing platform has taken action against it. No additional intelligence such as registrar details, IP location, or SSL certificate information is available in the current dataset. Because the site continues to respond and is already recognized by multiple detection mechanisms, defenders should prioritize immediate containment.

Recommended actions include adding the domain to perimeter firewalls, DNS sinkhole lists, and proxy filtering rules, as well as monitoring outbound traffic for any attempted connections to the host. Incident response teams should also correlate internal logs for signs of credential submission or session attempts directed at this domain, and consider notifying affected users if credential exposure is suspected. Ongoing vigilance is advised, given the active status and the presence of the domain on threat‑intelligence feeds.