jupiter-v2[.]com

The domain jupiter-v2.com was registered on 2025-11-03 and is currently taken offline. DNS resolution points to the IP address 104.21.31.188, which is part of Cloudflare’s AS13335 network located in the United States. No TLS certificate is presented, indicating the site was served over plain HTTP or an unencrypted connection. The authoritative name servers are asa.ns.cloudflare.com and rudy.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

Registration details list CSL Computer Service Langenbach GmbH d/b/a joker.com as the registrar. The page title observed during a brief fetch was "Jupiter: The DeFi app | Jupiter DEX," directly referencing the legitimate Jupiter brand and matching the declared target brand. VirusTotal analysis shows that six of ninety‑five security vendors flagged the domain, suggesting a moderate level of detection consensus. The domain appears on a single security blocklist and has been added to PhishDestroy’s blocklist, reinforcing the assessment that it is being used for malicious purposes.

The listed scam type is a crypto scam, consistent with the brand impersonation of a decentralized finance service. While the offline status limits immediate threat exposure, the underlying infrastructure—shared Cloudflare IP space and public name servers—remains reusable for future campaigns. Defenders should continue to block the domain and the associated IP address, monitor for newly registered domains that resolve to the same Cloudflare edge nodes, and incorporate the observed page title and registrar information into detection signatures. Ongoing vigilance is advised to catch any re‑activation attempts or copycat domains that may leverage the same brand impersonation tactics.