jspuqiao[.]top

Analysis dated July 24 2026 indicates that the domain jspuqiao.top was registered on 23 February 2026 through Gname.com Pte. Ltd. The authoritative name servers are rafe.ns.cloudflare.com. and rocky.ns.cloudflare.com., pointing to Cloudflare’s network. DNS resolution maps the domain to IP 104.21.84.180, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented a TLS certificate issued by Google Trust Services under the WE1 label, confirming the use of valid HTTPS.

The only visible page element is the HTML title “MINING”, and automated fingerprinting reports the presence of Vue.js, Facebook Pixel, Cloudflare Browser Insights and HTTP/3 support. VirusTotal analysis shows that one out of ninety‑three scanning engines flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have listed it as malicious. The current operational status is reported as offline, suggesting the hosting has been taken down or the site is otherwise inaccessible at the time of assessment. Given the combination of a recent registration, use of a generic title, detection by multiple security vendors, and inclusion on phishing‑related blocklists, the infrastructure is consistent with a generic phishing campaign.

However, without a live page capture, the exact payload or targeted brand cannot be confirmed. Defenders should continue to block traffic to jspuqiao.top at the DNS and network layers, monitor for any resurgence of the domain, and consider adding the IP address 104.21.84.180 to deny‑list rules. Ongoing observation of Cloudflare‑associated domains is advised, as the infrastructure may be reused for future malicious activities.