v2-jup[.]cc

Analysis of the domain v2-jup.cc indicates it was actively involved in a crypto scam impersonating the Jupiter brand. The domain, registered on February 21, 2026, through NiceNIC International Group Co., Limited, resolved to the IP address 172.67.156.229, which is associated with Cloudflare, Inc. in Canada. Infrastructure analysis reveals the use of Cloudflare nameservers (audrey.ns.cloudflare.com and augustus.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The page title, www.www.v2-jup.cc, suggests an attempt to mimic a legitimate URL structure, though the exact content of the site remains unanalyzed beyond this metadata.

At the time of reporting, the domain has been taken offline, though it was previously flagged by 10 of 93 security vendors on VirusTotal, indicating moderate detection coverage. It also appeared on at least one security blocklist, further corroborating its malicious classification. The scam type was explicitly categorized as a crypto scam, aligning with the impersonation of Jupiter, a known entity in the cryptocurrency space.

Defenders should treat this domain as part of a broader campaign targeting users through brand impersonation, particularly in the crypto sector. While the domain is currently inactive, monitoring for re-registration or reuse of associated infrastructure (e.g., IP, nameservers) is recommended. No additional details regarding the phishing kit, SSL certificates, or HTTP response codes are available, limiting further technical attribution.