jup-s3[.]com

The domain jup-s3.com was registered through Realtime Register B.V. on February 21, 2026. The domain resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is served by the Cloudflare authoritative nameservers damian.ns.cloudflare.com and imani.ns.cloudflare.com, indicating that the operator is leveraging Cloudflare’s edge network for anonymity and performance.

Security scoring shows a Gridinsoft trust rating of 0 out of 100, and the site appears on three independent security blocklists. VirusTotal analysis reports that three of ninety‑five scanned security vendors flagged the domain as malicious, reinforcing the low trust assessment. The SSL certificate is issued by Google Trust Services under the WE1 designation, which is typical for Cloudflare‑proxied sites but does not mitigate the observed malicious indicators.

The site is classified as a brand‑impersonation campaign targeting the Jupiter brand and is explicitly described as a cryptocurrency scam. The only observable page element is the title “Just a moment…”, and the HTTP response returns a 403 status code, suggesting that the payload may be delivered after an initial client‑side challenge. The domain is currently listed as active and is blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat‑intel feeds have identified it as a threat.

Defenders should block DNS resolution for jup-s3.com and any subdomains, enforce network‑level denial of traffic to the associated IP address, and monitor for outbound connections that attempt to interact with the site. Because the infrastructure relies on Cloudflare, traditional sink‑hole techniques may be limited; however, threat‑intel sharing of the observed nameservers and IP can aid in rapid containment. Continuous re‑evaluation is advised, as the site’s content may evolve beyond the current “Just a moment…” placeholder.