jupe-claim[.]pages[.]dev

The domain jupe-claim.pages.dev was observed resolving to the Cloudflare front‑end address 172.66.44.173. Registration data shows the domain was created on 21 February 2026 and is hosted behind Cloudflare, Inc., with no TLS certificate observed. HTTP requests return a 522 “Connection timed out” page title, indicating that the origin server failed to respond. The site is listed on a single security blocklist and was actively blocked by the PhishDestroy feed before being taken offline.

VirusTotal analysis recorded scans from 93 anti‑malware engines, none of which raised a detection at the time of the scan. The only categorisation supplied is “Crypto Scam”, consistent with a crypto‑drainer operation. Because the domain is currently offline, content cannot be examined, and the exact payload or phishing flow remains unknown.

However, the combination of a newly created domain, Cloudflare‑only hosting, lack of SSL, and placement on a blocklist are typical indicators of abuse. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑appearance of the same host or similar jupe‑claim subdomains, and add the IP address 172.66.44.173 to any threat‑intelligence feeds used for outbound traffic filtering. Ongoing observation of Cloudflare‑associated abuse patterns is recommended, as the infrastructure may be repurposed for future crypto‑drainer campaigns.