jupofficial[.]army

This domain, jupofficial.army, is flagged as an active generic phishing site with a high-risk classification. Registered on March 6, 2026, through Sav.com, LLC, it currently resolves to the IP address 172.67.132.199, which is associated with Cloudflare, Inc. (AS13335) in the United States. The domain employs Cloudflare nameservers (everton.ns.cloudflare.com and magdalena.ns.cloudflare.com) and utilizes Cloudflare Browser Insights and HTTP/3 technologies. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious infrastructure. Analysis indicates the domain is actively serving content, returning an HTTP 200 status, though the page title reads 'Page Not Available.' This may suggest either a placeholder, a cloaking mechanism, or an incomplete deployment of the phishing kit. The domain appears on at least one security blocklist, and ten out of ninety-four security vendors on VirusTotal have flagged it as malicious. No specific brand target or phishing kit details are currently available in the provided intelligence, limiting further classification of the threat type. Defenders should treat this domain as hostile infrastructure. The use of Cloudflare services complicates traditional IP-based blocking, as the same IP may host multiple unrelated domains. Network-level mitigations should focus on domain reputation and DNS filtering rather than IP-based restrictions. Given the domain's recent registration and active status, monitoring for changes in page content or additional detections is recommended. If internal logs indicate user traffic to this domain, immediate incident response actions—such as isolating affected endpoints and reviewing authentication logs—are advised.