juphub[.]click

The domain juphub.click was registered on March 11, 2026 through Sav.com, LLC and is currently hosted behind Cloudflare (ASN 13335) with the IP address 104.21.75.141 located in the United States. The site presented the page title "Suspected phishing site | Cloudflare" and responded with an HTTP 403 status, indicating that access was denied at the time of inspection. A Let's Encrypt certificate identified as version E7 was observed, confirming that TLS was in place but offering no additional trust beyond the standard certificate authority. VirusTotal recorded a single positive detection out of 94 scanned security vendors, suggesting at least one vendor flagged the domain as malicious.

AlienVault OTX listed the domain in one threat intelligence pulse, providing an additional independent confirmation of suspicious activity. The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it should be treated as hostile. Nameservers are configured as lennon.ns.cloudflare.com and alice.ns.cloudflare.com, both Cloudflare-managed.

The current operational status is offline, which may reflect takedown efforts or a temporary suspension. Defenders should continue to block resolution of 104.21.75.141, enforce DNS filtering for juphub.click, and monitor any related IOC updates. Given the limited detection count and the presence on multiple blocklists, the risk is elevated, and organizations should treat any traffic to this domain as potentially malicious, applying strict outbound controls and incident response procedures if exposure is suspected.