visual-ns-portal[.]beer

This domain, visual-ns-portal.beer, is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. It was registered on May 22, 2026, through Dynadot Inc, and resolves to IP address 178.16.52.101, hosted in Germany by Omegatech LTD. The domain uses Cloudflare nameservers (raquel.ns.cloudflare.com and benedict.ns.cloudflare.com) and an SSL certificate issued by Let's Encrypt R12. The page currently returns a 403 Forbidden status with the title '403 Forbidden', indicating the content may be intentionally restricted or the site is in a dormant state. VirusTotal analysis shows 19 out of 91 security vendors flagging this domain as malicious, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX records one associated threat intelligence pulse. The Gridinsoft trust score is 0 out of 100, reinforcing its untrustworthy nature. Defenders should block all traffic to this domain and its associated IP, monitor for any related subdomains or redirected traffic, and add the domain to internal threat intelligence feeds for ongoing surveillance. The exact phishing content or targeted brand has not been identified from available data; the generic classification applies due to the absence of specific brand indicators in the page title or known intelligence.