portailubs[.]com

Analysis indicates that portailubs.com was registered on April 28, 2026 and is currently active. The domain resolves to 172.67.153.184, an address owned by Cloudflare, Inc. in Canada and is served by Cloudflare name servers desi.ns.cloudflare.com and zac.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services (WE1) and returns HTTP 200 responses, which can help it appear legitimate to automated checks. Reputation scoring is extremely low, with Gridinsoft assigning a 0 out of 100 trust score. VirusTotal records show that 6 of 91 scanned security vendors flagged the domain, and it appears in a single public blocklist (PhishDestroy). Additionally, AlienVault OTX includes the domain in one threat pulse, confirming its association with malicious activity. The registrar information lists Fewmoretaps OU d/b/a Trustname.com, but no further infrastructure details are available. Content analysis has not been performed, so the exact phishing payload or targeted brand remains unknown. Defenders should treat the domain as high‑risk: block the hostname at perimeter firewalls and DNS filtering solutions, monitor outbound traffic for connections to the 172.67.153.184 address, and add the indicator to internal threat intel feeds. Continuous re‑scanning is recommended to capture any evolution in the site’s payload or hosting configuration.