lumpo[.]fun

The domain lumpo.fun is flagged as a high-risk brand impersonation campaign as of July 12, 2026. This domain appears to target the brand 'jupiter' and is currently active despite having a HTTP status of 403, which typically indicates a forbidden request. Analysis reveals that the domain is hosted on an Nginx server and resolves to the IP address 45.67.85.152, located in Great Britain and associated with the autonomous system AS203363 Kuroit Limited. The domain was registered through NameSilo, LLC on September 15, 2025, and is currently managed by the nameservers ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com. Security assessments show a Gridinsoft trust score of 0/100, which is the lowest possible score, and the domain appears on two security blocklists, including PhishDestroy and ScamSniffer. Of the 95 security vendors on VirusTotal, 4 have flagged the domain, indicating a level of concern among automated detection systems. The SSL certificate is issued by Let's Encrypt, a widely trusted certificate authority, which may lend a false sense of security to unsuspecting visitors. While the exact content of the webpage 'Lumpo' has not been analyzed, the infrastructure and security vendor detections suggest that this domain is part of a sophisticated impersonation campaign. Security professionals and network defenders are advised to block this domain and monitor for related activity, as it poses a high risk of credential theft or financial fraud. Regular updates to blocklists and active monitoring for related IP addresses and domain registrations are recommended to mitigate the potential impact of this threat.