jupsol-portal[.]xyz

The domain jupsol-portal.xyz was registered on June 11, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently flagged as an active delivery scam with a high risk level. As of July 29, 2026, the domain resolves to the IP address 188.114.96.3 and appears on three security blocklists, including detections by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing classifies this domain under social engineering, reinforcing its malicious intent. VirusTotal reports that 15 out of 91 security vendors flag the domain as malicious, though the specific nature of the content remains unconfirmed due to limited analysis of the site itself.

Infrastructure analysis reveals the domain is hosted on an IP with no additional context regarding its autonomous system or geolocation. The registrar, PublicDomainRegistry.com, is frequently associated with newly registered domains used in phishing campaigns, though this alone does not confirm intent. No evidence links this domain to a known phishing kit or targeted brand, and the exact content of the site has not been analyzed.

Defenders should treat this domain as actively malicious, particularly in environments where delivery or logistics-related scams pose a risk. Blocking the domain at the DNS or network level is recommended, alongside monitoring for related infrastructure or newly registered domains under the same registrar. Further investigation into the IP and associated domains may reveal additional threats linked to this campaign.