jup[.]ag-app-swap-web3[.]com

Analysis of the domain jup.ag-app-swap-web3.com indicates active brand impersonation targeting Jupiter, a known cryptocurrency platform. The domain was registered on February 21, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com, and currently resolves to IP 104.21.32.1 (AS13335, Cloudflare, Inc., US). No SSL certificate is present, and the domain returns an HTTP 403 status, suggesting restricted access or defensive measures. Infrastructure review reveals the domain is hosted behind Cloudflare, a common tactic to obscure origin servers. Nameservers point to ns1.verification-hold.suspended-domain.com and ns2.verification-hold.suspended-domain.com, which may indicate a suspended or placeholder configuration. The domain appears on one security blocklist (PhishDestroy) and is flagged by 2 of 93 security vendors on VirusTotal as malicious, consistent with crypto scam classification. The page title matches the domain name (jup.ag-app-swap-web3.com), which aligns with Jupiter’s branding but provides no further content confirmation. No phishing kit or additional technical artifacts have been identified in available data. Defenders should treat this domain as high-risk due to its brand impersonation, lack of SSL, and active blocklist presence. Monitoring for changes in HTTP status or certificate issuance is recommended, as these could signal operational updates. No further attribution or campaign linkage is currently available.