jupitercloud[.]in

Analysis of the domain jupitercloud.in indicates an active brand impersonation campaign targeting Jupiter, a recognized financial services entity. The domain was registered on February 21, 2026, through HOSTINGER operations, UAB, and currently resolves to the IP address 104.21.37.154. Infrastructure analysis reveals the use of Cloudflare and HTTP/3, with an SSL certificate issued by Google Trust Services. The page title 'Jupiter Cloud' aligns with the targeted brand, suggesting an intent to deceive users into believing the site is affiliated with Jupiter. As of July 12, 2026, the domain remains active and is flagged by 2 of 95 security vendors on VirusTotal. It appears on two security blocklists and has been referenced in 23 threat intelligence pulses on AlienVault OTX. Defensive measures have been implemented by at least two security providers, though the exact nature of the phishing content remains unconfirmed due to limited public analysis. The domain's registration age and continued activity indicate a persistent threat. Defenders are advised to monitor for connections to 104.21.37.154 and evaluate the domain's presence in logs or network traffic. Blocklisting jupitercloud.in and associated infrastructure may mitigate exposure. Further investigation into the site's content and payload delivery mechanisms is recommended to assess the full scope of the campaign.