jupdecem[.]com
Evidence Summary
This domain, jupdecem.com, was registered on December 13, 2025, through Metaregistrar BV and is currently offline, returning an HTTP 403 status. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers linda.ns.cloudflare.com and sullivan.ns.cloudflare.com, resolving to IP 172.67.220.18 in the US. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites leveraging Cloudflare’s proxy services.
Detection data shows 12 of 95 security vendors on VirusTotal flagged the domain as malicious, while AlienVault OTX lists it in one threat intelligence pulse. The domain appears on one security blocklist and is blocked by PhishDestroy, though the specific phishing campaign or targeted brand remains unconfirmed. No page title or scam type is available in the provided data, limiting further classification.
Defenders should treat this domain as a confirmed phishing threat based on detection volume and blocklist presence, despite its current offline status. The use of Cloudflare infrastructure and a recent registration date align with common phishing tactics, though the lack of additional context (e.g., kit, brand impersonation) prevents deeper attribution. Review logs for connections to 172.67.220.18 or the domain itself, and monitor for reactivation or related domains registered through the same registrar.
Data Coverage
Network Security Intelligence
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Detection timeline
-
Domain status
Reachable → Unreachable
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
-
Domain status
Unreachable → Reachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive