jerseyyupoo[.]com

This domain, jerseyyupoo.com, is identified as a generic phishing site specifically targeting sports merchandise consumers through fake jersey sales. The site impersonates major football clubs including Barcelona and Paris Saint-Germain (PSG) to deceive visitors into submitting payment details. As of the latest verification, the domain has been taken offline, though prior activity remains a confirmed threat. Analysis indicates jerseyyupoo.com was created on May 20, 2025, and registered through DNSPod, Inc. It resolved to the IP address 92.113.16.197, hosted on AS47583 (Hostinger International Limited) in Germany. The domain was flagged by 17 out of 95 security vendors on VirusTotal, with detections categorized under phishing. It appears on five distinct security blocklists and holds an SSL certificate issued by Let's Encrypt (R12). The page title, 'Club Jersey Nation jersey Barceona PSG etc- Yupoo,' directly references the impersonated brands, reinforcing its fraudulent intent. The domain is currently offline, reducing immediate risk of exposure. However, users who may have interacted with the site should monitor financial accounts for unauthorized transactions and consider resetting credentials if payment details were entered. Organizations are advised to block the domain and associated IP (92.113.16.197) at the network level. Security teams should review logs for connections to this infrastructure and update detection rules to include the domain and its known indicators.