jupofficial[.]com

The domain jupofficial.com was registered on March 11, 2026 through Sav.com, LLC. The authoritative name servers are arturo.ns.cloudflare.com and venus.ns.cloudflare.com, indicating that the domain is hosted on Cloudflare's network. DNS resolution points to the IPv4 address 104.21.86.187, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Web traffic to the host returns an HTTP 403 status code and the page title is rendered as “Just a moment…”. The TLS certificate presented is issued by Google Trust Services under the WE1 certificate authority, confirming that the site uses a valid, publicly trusted SSL chain. The combination of a forced 403 response and a generic placeholder title is characteristic of credential‑harvesting pages that aim to delay automated analysis. Threat intelligence sources classify the site as a generic phishing operation. It is currently listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, and has been flagged by one of ninety‑five VirusTotal scanners. AlienVault OTX contains a single pulse referencing the domain, and Gridinsoft assigns a trust score of 0 out of 100. The risk rating is high and the status is active, indicating ongoing malicious activity. Defenders should add jupofficial.com to network deny lists and enforce DNS sink‑hole policies to prevent client resolution. Continuous monitoring of the associated IP address and Cloudflare name servers is advised, as the infrastructure can be repurposed for additional phishing campaigns. While the current evidence points to a credential‑stealing site, the exact phishing lure and targeted brand remain unknown, requiring further payload analysis if a sample is obtained.