jadboutique[.]org

This domain was registered on February 02, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently served from the IP address 5.181.161.45, which maps to the Ukrainian autonomous system AS205282 owned by TILDA PLATFORM CLOUD SERVICES CO. L.L.C. The authoritative nameservers dns1.hostiq.ua and dns2.hostiq.ua resolve the domain, and the web server returns HTTP 200 with a TLS certificate issued by Let’s Encrypt (identifier YE1). The site presents the page title “JAD_boutique” and is built on the Tilda website builder, running on an Ubuntu host behind Nginx. Client‑side libraries Hammer.js and tracking pixels from Yandex.Metrika and Facebook are detected, indicating typical analytics and interaction tooling.

The domain’s MX record points to itself, suggesting no separate mail infrastructure. PhishDestroy has already added the domain to its blocklist and it appears on one additional security blocklist. No detection signatures were reported by VirusTotal at the time of scanning, but the absence of detections does not constitute validation of safety. The evidence points to a newly created infrastructure used for generic phishing, although the exact payload or credential‑harvesting pages have not been publicly disclosed.

Defenders should immediately block network resolution to 5.181.161.45 and add jadboutique.org to URL filtering and email gateway deny lists. Continuous monitoring of the associated nameservers and ASN is advised, as the operator may spin up additional domains on the same hosting platform. Threat intel feeds should be updated with the observed indicators of compromise, and any inbound traffic from the domain should be logged and investigated for potential credential compromise.