juplter-dex[.]com

Analysis indicates that the domain juplter-dex.com was registered on 13 November 2025 through Dominet (HK) Limited. The domain resolves to the IP address 172.67.208.191, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is presented for the host, meaning HTTPS connections would be terminated without encryption. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming its association with malicious activity.

Gridinsoft assigns the domain a trust score of 0 out of 100, the lowest possible rating, reinforcing the suspicion. VirusTotal scans show that 11 of 95 antivirus and URL‑reputation engines flagged the domain, providing independent corroboration of its malicious nature. The listed nameservers, rayne.ns.cloudflare.com and west.ns.cloudflare.com, are typical of Cloudflare‑hosted domains and do not, by themselves, indicate benign intent. The threat classification supplied as “Social Media Phishing” suggests that the site was used to harvest credentials or personal information from users of social platforms.

The current operational status is reported as offline, which may be the result of takedown actions or temporary hosting changes, but the historical evidence remains relevant for threat hunting. Defenders should continue to block connections to juplter-dex.com at the DNS and network layers, monitor for any residual hash or URL indicators that may have been cached by security products, and consider adding the domain to internal deny lists. Because the domain was hosted on Cloudflare, threat actors could have leveraged the provider’s flexible DNS to shift the underlying IP address in future campaigns; therefore, any future resolution of the same domain or similar patterns should be treated with heightened scrutiny.