install-new-jupiter-wallet[.]pages[.]dev

The domain install-new-jupiter-wallet.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is protected by an SSL certificate issued by Google Trust Services under the WE1 label. DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 Cloudflare and is geolocated to the United States. The site serves HTTP status 200, enforces HSTS, and supports HTTP/3, indicating a modern web stack. Reputation metrics are extremely low: Gridinsoft rates the domain 0 / 100, Scamadviser 1 / 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the site, and VirusTotal reports that 7 of 93 security vendors flag the domain as malicious. The page title "Jupiter Wallet Download | Spot, Perps & Lending Features" suggests an attempt to impersonate the Jupiter brand across multiple service categories, consistent with the classified threat type of brand impersonation. Current intelligence does not include a content scrape, so the exact malicious payload or credential‑harvesting mechanisms remain unknown. Defenders should treat the domain as high‑risk: block the hostname at network perimeter, add the IP to threat‑intel feeds, and monitor for any related C2 activity. Continuous re‑evaluation is advised in case additional indicators emerge.