jupag[.]ink

The domain jupag.ink is active and was registered on April 22, 2026 through a registrar identified as PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IP address 188.114.97.3, which is associated with a CDN provider located in Canada. The domain uses HSTS, HTTP/3 and other modern transport features, and presents a publicly trusted TLS certificate. Nameservers becky.ns.cloudflare.com and ezra.ns.cloudflare.com indicate CDN‑based hosting. The site returns an HTTP 403 status, and the observed page title reads "JUP – Claim Your Allocation," suggesting a brand‑impersonation attempt targeting the Jupiter brand. Security telemetry shows the domain appears on three blocklists and is flagged by nine of ninety‑one scanners on VirusTotal, reflecting a moderate level of detection confidence. It is also listed by additional threat‑intelligence feeds and receives a Gridinsoft trust score of 0/100. The underlying phishing kit is identified as an Airdrop Scam, consistent with the brand‑impersonation narrative. Analysis cannot confirm the exact content or user‑interaction flow beyond the title, and no visual or functional details have been observed. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and update endpoint and email filtering policies to include the listed indicators. Continuous re‑evaluation is advised in case the site evolves or new threat intelligence emerges.