jupiterco[.]pages[.]dev

This domain, jupiterco.pages.dev, is assessed as a high-risk generic phishing infrastructure. It was created on June 9, 2026, and remains active as of the July 29, 2026 report date. The domain is hosted through Cloudflare Pages, a platform that provides static site hosting and CDN services. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which have explicitly blocked access to this domain.

VirusTotal scanning reveals that 10 of 91 security vendors flag this domain as malicious, and Google Safe Browsing specifically classifies it as a social engineering threat. This classification indicates the domain is designed to deceive users into divulging sensitive information or performing actions they would not normally take. The exact brand or service being impersonated has not been identified in the available intelligence, and no page title or content analysis has been performed. Therefore, the precise nature of the phishing campaign—whether it targets login credentials, financial details, or other data—remains uncertain.

Defenders should treat this domain as actively hostile and block all traffic to it at the network and email gateway level. Organizations should monitor for any internal communications or user reports that reference this domain, as it may be used in targeted phishing campaigns. Given the high risk level and active status, immediate inclusion in blocklists and threat intelligence feeds is recommended. No additional infrastructure details, such as ASN or hosting country, are available in the current data to further characterize the threat actor's hosting setup.