kupi-pasport[.]icu

The domain kupi-pasport.icu is currently under investigation as a generic phishing threat. The domain has been specifically flagged for attempting to deceive users by impersonating legitimate services, a common tactic in phishing schemes. The risk level is being evaluated further as part of ongoing analysis efforts.

Several critical data points were identified in the analysis of kupi-pasport.icu. The domain was created on April 21, 2026, and it was registered through FewMoreTaps OÜ. The domain resolves to the IP address 85.208.186.116. Despite having a VirusTotal detection score of 0/95, indicating it has not been widely flagged by antivirus engines, the domain appears on one security blocklist and has been blocked by PhishDestroy. It has a Gridinsoft trust score of 0/100, suggesting high levels of distrust. The domain was found in one threat intelligence pulse on AlienVault OTX, and the SSL certificate was issued by Let's Encrypt. The domain is currently offline.

To mitigate the risks associated with domains like kupi-pasport.icu, users are advised to enhance their security measures, including employing tools that can detect and block phishing attempts. Always verify the legitimacy of websites, especially those requesting sensitive information. Keeping software updated and enabling multi-factor authentication where possible can provide additional layers of security. Organizations should train employees on how to recognize and report phishing attempts to minimize the impact of such threats.