jup[.]rocks

Analysis of the domain jup.rocks indicates it was configured as a generic phishing endpoint, currently offline as of July 24, 2026. Infrastructure evidence reveals the domain resolves to IP address 172.67.218.240, hosted on Cloudflare's network (AS13335) in the United States. The domain is registered through Cloudflare, Inc., and utilizes Cloudflare nameservers (ariadne.ns.cloudflare.com and ignacio.ns.cloudflare.com). No SSL certificate was detected during the assessment.

The page title 'Nur einen Moment…' suggests a temporary or transitional authentication checkpoint, commonly associated with phishing pages designed to capture credentials or session tokens. While the exact brand or service being impersonated remains unconfirmed due to the absence of additional page content analysis, the title implies a staged interaction rather than a static landing page. Detection data is limited; only two of 95 security vendors on VirusTotal flagged the domain at the time of evaluation, and it appears on a single security blocklist (PhishDestroy). Defenders should note that the domain's reliance on Cloudflare infrastructure is consistent with phishing campaigns leveraging CDN services to obscure hosting origins and evade takedowns.

The absence of an SSL certificate may indicate either a misconfiguration or an attempt to avoid certificate transparency logs. Given the domain's current offline status, further forensic analysis of cached or archived content is recommended to determine the full scope of the campaign. Network defenders are advised to monitor for related domains registered under the same registrar or resolving to the same IP range, as these may represent additional attack infrastructure.