jumepr[.]xyz

This domain, jumepr.xyz, is under active investigation as a high-risk phishing infrastructure targeting users of the Jumper platform, as indicated by its page title 'Jumper | Smart App for the Universal Market.' Registered on March 26, 2026, through Namecheap, the domain remains operational and resolves to the IP address 34.175.18.31, hosted on Google Cloud infrastructure in Spain (europe-southwest1). Analysis of its nameservers, ns1.siteground.net and ns2.siteground.net, suggests a hosting configuration consistent with known phishing operations. The domain is currently flagged by two security blocklists, including PhishDestroy and ScamSniffer, and appears in one threat intelligence pulse on AlienVault OTX. Gridinsoft assigns it a trust score of 0/100, further indicating malicious intent. While the domain returns an HTTP 403 status, this does not preclude the existence of active phishing pages or redirects. The SSL certificate, issued by Let's Encrypt (R13), provides no inherent trust signal, as phishing domains frequently use valid certificates to appear legitimate. Two of 94 security vendors on VirusTotal have flagged the domain, though this detection rate is not conclusive evidence of its current threat level. Defenders should prioritize blocking or monitoring this domain, particularly in environments where Jumper-related services are accessed. The absence of additional forensic details—such as phishing kit signatures or confirmed victim reports—limits further classification, but the combination of infrastructure indicators, blocklist presence, and brand association justifies immediate mitigation. Further analysis of associated URLs or subdomains may reveal additional attack vectors.