jnp[.]ac

The domain jnp.ac was registered on August 24, 2025 through NiceNIC International Group Co., Limited and is currently hosted on the OVH SAS network (AS16276) in Spain, resolving to IP address 178.33.167.71. DNS resolution shows the domain using Cloudflare name servers ariadne.ns.cloudflare.com and ignacio.ns.cloudflare.com. No SSL certificate is present, indicating that any web service would be delivered over plain HTTP. The site’s page title is simply "jnp.ac," and no further content analysis is available because the domain has been taken offline.

Security telemetry indicates a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single security blocklist. It has been actively blocked by the PhishDestroy service, reinforcing the assessment that it is being used for malicious purposes. VirusTotal scans show that three of ninety‑five antivirus or URL‑reputation engines flagged the domain, providing additional corroboration of its malicious nature.

Although the exact phishing campaign details (e.g., target brand, credential‑stealing page design) are not disclosed, the combination of a low trust score, blocklist presence, and multiple vendor detections aligns with a generic phishing classification. Defenders should add jnp.ac to local and network‑level deny lists, enforce DNS filtering that blocks the associated IP 178.33.167.71, and monitor for any resurgence of the domain or related sub‑domains. Continuous re‑scanning via VirusTotal or similar services is advised to capture any changes in detection status, and any inbound traffic to the domain should be logged for incident response analysis.