juqp-ag[.]com

Analysis of the domain juqp-ag.com indicates it was actively impersonating Jupiter, a cryptocurrency-related brand, as part of a crypto scam operation. The domain was registered on February 21, 2026, and resolved to the IP address 104.21.19.127, hosted on Cloudflare's network (AS13335) in the United States. The page title observed was 'Home | Jupiter,' directly referencing the targeted brand, and the domain was classified as a crypto scam by at least one security vendor. Infrastructure checks reveal the domain was assigned an SSL certificate labeled WE1, though no further details about the issuer or validity period are available.

At the time of assessment, the domain was offline, preventing real-time analysis of its content or functionality. It appeared on a single security blocklist, specifically PhishDestroy, which flagged it as malicious. No detections were recorded by the 93 vendors that scanned the domain on VirusTotal, though this absence does not confirm the domain's safety or legitimacy. The domain's creation date, combined with its brief operational window and subsequent takedown, suggests a short-lived campaign typical of phishing or scam infrastructure.

Defenders should treat juqp-ag.com as part of a broader pattern of crypto-themed brand impersonation and monitor for related domains or IPs. Network-level blocking of the resolved IP (104.21.19.127) may mitigate residual risk, though Cloudflare's shared hosting environment limits the efficacy of IP-based defenses. Further investigation into associated infrastructure, such as nameservers or linked domains, is recommended to identify connected threats.