jup[.]ag-v4-wailet-app[.]com

This domain, jup.ag-v4-wailet-app.com, is flagged as a high-risk crypto scam impersonating the Jupiter brand, a known target for phishing and fraudulent activity. Registered on February 21, 2026, through MAT BAO CORPORATION, the domain currently resolves to IP 172.67.200.89, hosted on Cloudflare's infrastructure (AS13335). Nameservers alberto.ns.cloudflare.com and mona.ns.cloudflare.com further confirm Cloudflare's role in its hosting. The domain is actively blocked by at least two security vendors, including PhishDestroy and ScamSniffer, and holds a Gridinsoft trust score of 0/100, indicating confirmed malicious activity. Analysis of the domain's current state reveals an HTTP 403 status, with the page title displaying 'ag-v4-wailet-app.com | 521: Web server is down.' This suggests the server may be intentionally misconfigured or temporarily disabled, a common tactic to evade detection while maintaining infrastructure for future attacks. The SSL certificate, issued by Google Trust Services (WE1), aligns with typical Cloudflare-hosted domains but does not mitigate the underlying threat. Technologies detected include Cloudflare and HTTP/3, consistent with modern phishing infrastructure designed to bypass traditional security measures. While three of 93 security vendors on VirusTotal flag this domain, the exact nature of the scam—beyond its classification as a crypto scam—remains unconfirmed due to the lack of accessible page content. Defenders should treat this domain as active and malicious, blocking it at the DNS or network level. Monitoring for changes in HTTP status or page content is recommended, as the domain may resume operations with updated phishing kits or redirection schemes. No further brand-specific details or visual indicators are available for analysis at this time.