jup[.]ag-beta-app-edge-cdn[.]cloud

The domain jup.ag-beta-app-edge-cdn.cloud was created on October 31, 2025 and is currently listed as offline. It resolves to the IP address 104.21.89.104, which is part of the Cloudflare network (AS13335) and geolocated in the United States. The registration record shows the domain was registered through Web Commerce Communications Limited, and the authoritative nameservers are clint.ns.cloudflare.com and melina.ns.cloudflare.com. No SSL certificate is presented for the site, and the HTTP response returns a page titled "Access Denied," indicating that the server is intentionally refusing connections, consistent with a takedown or temporary suspension.

Google Safe Browsing has flagged the domain for social engineering, and it appears on one security blocklist. Independent scanning on VirusTotal shows that 15 of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. Additional reputation data include a Gridinsoft trust score of 0 out of 100 and a block entry by PhishDestroy. The threat is classified as a crypto scam that impersonates the brand Jupiter.

While the offline status limits immediate interaction, the infrastructure details—particularly the Cloudflare edge IP and the registrar information—remain useful for threat‑intel correlation. Defenders should ensure that the IP 104.21.89.104 is blocked at network perimeter devices, update DNS filtering policies to deny any resolution of the domain, and monitor for similar sub‑domains registered by the same registrar or using the same nameservers. Ongoing observation of threat‑intel feeds for re‑activation or related campaigns is recommended.