jup-ag[.]lol

Analysis indicates that the domain jup-ag.lol was registered on 21 February 2026 through PublicDomainRegistry.com (PDR Ltd.). The site presents a TLS certificate issued by Google Trust Services under the WE1 root, and all traffic is terminated at Cloudflare (AS13335) with HSTS and HTTP/3 enabled. DNS resolution points to 188.114.97.3, and the authoritative nameservers are tosana.ns.cloudflare.com and deborah.ns.cloudflare.com. HTTP requests return a 403 status and the only visible page title is “Just a moment…”, providing no further functional evidence. The domain is flagged as a cryptocurrency‑related impersonation of the Jupiter brand. It appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100, and AlienVault OTX references the domain in a single threat‑intel pulse. VirusTotal reports five detections out of ninety‑five scanners. Given the combination of brand impersonation, low trust score, blocklist presence, and active blocking by multiple security products, the domain should be treated as high‑risk. Defenders are advised to add the host to URL filtering policies, monitor DNS queries for the associated IP and nameservers, and consider sink‑holing or sink‑blocking any subsequent resolution attempts. Further investigation of the payload behind the “Just a moment…” page is required to confirm the exact cryptocurrency scam vector.