jentopup[.]com

PhishDestroy identifies jentopup.com as a credential theft domain under active investigation for generic phishing activity. This domain exhibits no affiliation with legitimate brands but is designed to harvest user credentials through deceptive login portals. No crypto drainer kits or brand impersonation artifacts (e.g., fake Meta, PayPal, or banking pages) were detected in initial scans, suggesting a broader phishing campaign targeting unsuspecting users. The domain’s simplicity and lack of obfuscation imply a low-effort but potentially high-yield operation. This domain resolves to IP 185.158.133.1 and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate is issued by Google Trust Services, a tactic often used to mimic legitimacy. The domain was created on May 14, 2026, and currently shows 1/95 detections on VirusTotal, with no inclusion in Google Safe Browsing (GSB) or major blocklists. The registrar’s anonymity-friendly structure and the domain’s recent creation date raise further suspicion, as threat actors frequently exploit newly registered domains for short-lived campaigns. As of this report, jentopup.com remains active with a status of under_investigation. Immediate actions include blocking the domain at the network level (185.158.133.1) and flagging it in enterprise security tools. Users are advised to avoid interacting with the domain and report any suspicious activity to their IT security teams. While the current risk is classified as under_investigation, the combination of zero detections, registrar anonymity, and recent registration suggests evolving tactics. Continuous monitoring is required to determine if this domain escalates into a larger credential theft operation.