jup[.]ag-api-wallet-v2-connects[.]space

This domain jup.ag-api-wallet-v2-connects.space was registered on February 21 2026 and is currently listed as offline. DNS resolution points to the IPv6 address 2606:4700:3031::ac43:a6f5, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presented the page title “Instant | Jupiter”, matching the brand target Jupiter and indicating a crypto‑scam impersonation of the Jupiter brand. The SSL certificate is identified as WE1, but no further certificate details are available.

Threat intelligence flags the domain as a brand‑impersonation crypto scam; it appears on a single security blocklist and is blocked by PhishDestroy. VirusTotal analysis shows that one out of ninety‑five scanning engines flagged the domain, suggesting at least one vendor detected malicious behavior. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the low credibility of the host. No additional evidence such as Safe Browsing or OTX entries is provided.

Given the combination of brand‑targeted page title, low trust score, blocklist presence, and the single vendor detection, defenders should treat the domain as malicious. Recommended actions include adding the IPv6 address and the domain to firewall deny lists, monitoring for any future re‑activation, and alerting users who may have received communications referencing Jupiter. Continuous re‑evaluation is advised should the domain come back online or additional detections emerge.