jupdecem[.]com

This domain, jupdecem.com, was registered on December 13, 2025, through Metaregistrar BV and is currently offline, returning an HTTP 403 status. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers linda.ns.cloudflare.com and sullivan.ns.cloudflare.com, resolving to IP 172.67.220.18 in the US. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites leveraging Cloudflare’s proxy services.

Detection data shows 12 of 95 security vendors on VirusTotal flagged the domain as malicious, while AlienVault OTX lists it in one threat intelligence pulse. The domain appears on one security blocklist and is blocked by PhishDestroy, though the specific phishing campaign or targeted brand remains unconfirmed. No page title or scam type is available in the provided data, limiting further classification.

Defenders should treat this domain as a confirmed phishing threat based on detection volume and blocklist presence, despite its current offline status. The use of Cloudflare infrastructure and a recent registration date align with common phishing tactics, though the lack of additional context (e.g., kit, brand impersonation) prevents deeper attribution. Review logs for connections to 172.67.220.18 or the domain itself, and monitor for reactivation or related domains registered through the same registrar.