thejupagportal[.]com

The domain thejupagportal.com was registered on July 20, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. Infrastructure analysis shows the domain resolves to the IPv4 address 188.114.97.3 and uses Cloudflare authoritative nameservers joaquin.ns.cloudflare.com and leia.ns.cloudflare.com. The IP is not associated with a known hosting provider in the supplied data, but the presence of Cloudflare DNS suggests the site may be leveraging Cloudflare’s CDN and protection services. VirusTotal records indicate that the domain was submitted to 91 scanning vendors; none of the vendors returned a detection at the time of the scan.

This lack of detections does not constitute a safety guarantee, as threat actors can employ evasion techniques or the payload may be delivered only after additional user interaction. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one operational anti‑phishing service has identified it as malicious. No public SSL certificate details, HTTP response codes, or page title information have been disclosed, so the surface‑level characteristics of the web content remain unknown. Consequently, defenders cannot confirm whether the site hosts credential‑harvesting forms, redirects, or other payloads.

Given the recent creation date, active status, association with a known blocklist, and the Cloudflare DNS configuration, the domain should be treated as a high‑confidence phishing indicator. Defensive teams should add the domain and its resolved IP address to outbound and inbound filtering rules, monitor DNS queries for the listed nameservers, and consider proactive blocking in web proxies and secure email gateways. Continuous re‑evaluation is advised, as additional telemetry such as SSL fingerprint, HTTP headers, or page content may emerge and refine the risk profile.