s3-jupiter[.]com

The domain s3-jupiter.com, registered on November 26, 2025 through the registrar Name SRS AB, has been identified as a crypto‑focused brand‑impersonation campaign targeting the Jupiter brand. DNS records list bingo.ns.cloudflare.com and logan.ns.cloudflare.com as its authoritative nameservers, and the hostname resolves to IP address 104.21.85.178, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. No TLS certificate is presented for the site, indicating an unsecured HTTP service.

An HTTP request to the host returned a page whose title is simply “Just a moment…”, and the site is currently reported as taken offline. Security assessments show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single blocklist, PhishDestroy. VirusTotal scans have flagged the domain in 2 of 95 vendor engines, providing additional confirmation of malicious intent.

The available evidence points to a crypto scam that leverages the Jupiter brand name to deceive victims, but the exact payload or phishing kit cannot be determined without active content analysis. Defenders should block the domain at the network perimeter, update URL filtering rules to include its IP range, and monitor for any resurgence of the host. Continuous observation of Cloudflare‑hosted IPs associated with this domain is advised, as the infrastructure could be repurposed for related campaigns.