jupcore[.]net

This domain, jupcore.net, was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently hosted on Cloudflare's network (AS13335). DNS resolves to 104.21.52.114, and the authoritative nameservers are elle.ns.cloudflare.com and gerald.ns.cloudflare.com, indicating the use of Cloudflare's DNS and CDN services. The TLS certificate presented is issued by Google Trust Services under the WE1 label, which is consistent with Cloudflare's default HTTPS provisioning. HTTP headers reveal the presence of Cloudflare Browser Insights, Cloudflare edge logic, and support for HTTP/3, all typical of a site served behind Cloudflare.

The only visible page element is a title of “Just a moment…”, which is a generic placeholder and does not provide any indication of the underlying content. Security telemetry shows the domain appears on one public blocklist and is flagged by PhishDestroy. VirusTotal analysis reports that 2 of 93 scanning engines have classified the domain as malicious, reinforcing the suspicion of abuse. No additional public intelligence, such as Safe Browsing or OTX entries, is available for this domain.

The risk rating assigned is elevated, and the site status is marked as offline, suggesting the operator may have taken the infrastructure down after detection. However, the combination of recent registration, use of premium CDN services, a malicious rating from multiple vendors, and inclusion on a phishing‑specific blocklist strongly indicates that jupcore.net was being used for a generic phishing campaign. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting on other IP ranges, and consider adding the associated IP address (104.21.52.114) to internal deny lists. Additional scrutiny of outbound connections to Cloudflare‑served IP space may be warranted, given the potential for rapid re‑deployment of similar phishing infrastructure.