jup-7xr[.]pages[.]dev

The domain jup-7xr.pages.dev was registered on June 09, 2026 through Cloudflare Pages and is currently active. DNS resolution points to the IP address 188.114.97.3, a host commonly associated with Cloudflare edge infrastructure. Google Safe Browsing has classified the domain as a social engineering threat, indicating that it is being used to lure users into disclosing credentials or personal information.

Independent security blocklists have listed the domain on three separate watchlists, specifically PhishDestroy, MetaMask, and SEAL, reinforcing the assessment that the site is being leveraged for malicious phishing campaigns. VirusTotal analysis shows that 11 out of 91 scanned security vendors have flagged the domain, providing additional corroboration of its malicious nature. The aggregate evidence places the threat at a high risk level, and defenders should treat any traffic to this host as hostile.

Immediate mitigation steps include adding the domain to network deny lists, updating intrusion detection signatures, and configuring web filtering appliances to block resolution to 188.114.97.3. Continuous monitoring for any changes in DNS records, SSL certificate issuance, or page content is advised, as the current intelligence does not include details on the site’s HTML title, certificate properties, or specific impersonated brand. Organizations should also consider sharing observables with threat intelligence sharing platforms to enhance collective detection capabilities.