jupitersbt[.]com

Analysis of jupitersbt.com as of July 19, 2026, confirms active brand impersonation targeting Jupiter, a cryptocurrency platform. The domain is hosted on Cloudflare infrastructure, resolving to 188.114.97.3 (AS13335, Canada) and using nameservers rohin.ns.cloudflare.com and stella.ns.cloudflare.com. Registration details point to NICENIC INTERNATIONAL GROUP CO., LIMITED, though no creation date is specified in available intelligence. Technical indicators show a 403 HTTP status, suggesting access restrictions or a placeholder state, while the page title 'Just a moment...' aligns with Cloudflare interstitial pages. The domain is flagged by six security vendors on VirusTotal and appears in two AlienVault OTX threat intelligence pulses, corroborating malicious classification. It is also blocked by PhishDestroy and listed on one security blocklist. SSL certification is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious sites, offering no definitive verdict on intent. The domain's scam type is explicitly labeled as brand impersonation, with Jupiter as the confirmed target. No additional phishing kit or payload details are available at this time. Defenders should treat jupitersbt.com as high-risk infrastructure. Recommended actions include blocking the domain at DNS and web proxy layers, monitoring for related subdomains or IP associations, and alerting users to potential Jupiter-themed credential harvesting or fraudulent transaction attempts. Further investigation into registration patterns and hosting overlaps with known malicious campaigns is advised.