jupupuppuupdsgjiusdgisd[.]com

Analysis conducted on July 23, 2026 identifies the domain jupupuppuupdsgjiusdgisd.com as a high‑risk brand‑impersonation site targeting Jupiter. The domain was registered on May 30, 2026 through OwnRegistrar, Inc. and is currently taken offline. DNS resolution points to 188.114.96.3, an address owned by Cloudflare (AS13335) located in the United States. The authoritative nameservers are ken.ns.cloudflare.com and ollie.ns.cloudflare.com, confirming that the infrastructure is fully proxied behind Cloudflare’s network and that HTTP/3 is in use. No TLS certificate is presented, indicating the site was served without HTTPS at the time of capture. The front‑end stack consists of Node.js, Vue.js, and Nuxt.js, with Cloudflare Browser Insights enabled, which is consistent with many modern phishing kits.

The page title returned by the server is "Jupiter | The Home of Onchain Finance", directly echoing the legitimate brand name and reinforcing the impersonation claim. The kit associated with the domain has been classified as an "Airdrop Scam", a common vector for extracting cryptocurrency credentials. Reputation services show a Gridinsoft trust score of 0 / 100, and the domain appears on three public blocklists. VirusTotal records indicate that 14 of 91 scanned security vendors flagged the domain as malicious, providing independent confirmation of its malicious intent. Additional blocking is observed from PhishDestroy, MetaMask, and SEAL, further demonstrating that the community has taken defensive action. Uncertainties remain regarding the exact content served before the site was taken offline, as no SSL certificate or live HTTP response was captured.

The absence of a valid certificate could be a deliberate tactic to avoid TLS inspection, but it also prevents verification of content integrity. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and add the IP address 188.114.96.3 to reputation lists.