jupss[.]com

Analysis indicates that the domain jupss.com was registered on February 21, 2026 and is presently resolved to the IP address 172.67.219.200, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presents a page title of “Home | Jupiter,” matching the declared brand target Jupiter, and the intelligence tags the activity as a crypto‑scam that leverages brand impersonation. The TLS certificate in use is identified only as “WE1,” confirming that the connection is encrypted but providing no additional trust signals. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one trusted feed has flagged the host as malicious.

VirusTotal analysis shows that the URL was submitted to 93 scanning engines, none of which returned a positive detection at the time of review; this lack of detections does not constitute evidence of safety, as many credential‑stealing or crypto‑draining campaigns evade static scanners. The current operational status is offline, and the domain has been taken down, which limits further live observation. Uncertainties remain regarding the specific payload or phishing page content, as no visual or HTML evidence has been captured, and the exact certificate authority for “WE1” is not disclosed.

Defenders should continue to monitor the domain for any re‑registration or resurgence, enforce blocklist updates that include jupss.com, and consider adding the IP address 172.67.219.200 to network‑level deny lists if not already covered by existing Cloudflare mitigations. In addition, security teams should educate users about unsolicited communications that reference Jupiter and request cryptocurrency transfers, as the brand impersonation suggests a social‑engineering vector aimed at extracting digital assets. Ongoing vigilance is advised until the threat actor’s infrastructure is fully dismantled.