Is jup-agf.world a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page presence titled "Home | Jupiter" on the domain jup-agf.world. It uses the name of an established-sounding crypto brand but offers very little text content. It appears to present a landing page for a brand-styled web service, but its actual products, operator and business model cannot be established from the captured content.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. Multiple independent security engines currently flag the domain as malicious, including several leading security vendors, and this amounts to a confirmed blacklisting. The homepage also changed substantially once a visitor interacted with it. Both its visible content and its structure differed sharply from the initial load, and the page rewrote a large part of its own document structure while generating a high volume of script errors. This behaviour is characteristic of cloaking, where a page shows one thing to scanners or first-time views and another to a user who proceeds. The domain is also young, and its name combines a brand-like label with an unrelated suffix and an uncommon top-level domain. Together with the "Jupiter" page title, this fits the pattern of a lookalike or brand-borrowing site. No confirmed identity contradiction or phishing verdict was recorded, and the operator's real-world identity remains unverified. The site's own content offers no counterweight, because its text is minimal and no products or claims can be assessed. Any site that asks a visitor to connect a wallet or enter credentials, and shows this combination of blacklisting and cloaking, should be treated as hostile. Evidence:

• Homepage: after interaction, the page's content and layout differed completely from the initial view (100% semantic and visual divergence), with 1,608 document-structure mutations and 23 console errors across three sandbox runs.
• Reputation checks: 16 engines rated the domain malicious and 2 suspicious, including three tier-one security vendors, which triggered an automatic override of the trust assessment.
• Domain profile: the domain was registered on 2025-12-06 (~0.89 years old), and its brand-styled "Home | Jupiter" title does not match its hyphenated domain label.

Regulatory Verification Notes

The captured homepage provides no clear company name, licence, registration number or governance information, so the on-site disclosure state is unclear. The site also offers no legal or terms pages that would establish an accountable operator. The registrant details are incomplete or hidden, which amounts to ownership opacity. That is an administrative limitation, not an identity contradiction, but it removes any independent route to a responsible party while the reputational and behavioural findings remain unresolved. No regulatory standing can be inferred, and no third-party broker record matched this site. A transport certificate is present, but it only encrypts traffic and says nothing about the operator's legitimacy. Evidence:

• Homepage: roughly 988 characters of text, with no operator name, licence reference or legal entity disclosed.
• Registration: the domain was registered through OwnRegistrar, Inc. and is set to expire 2026-12-06, with incomplete registrant details.
• Encryption: the TLS certificate was issued by WE1 (domain-validated, DV), valid to 2026-11-28, and the site is served from AS13335 (Cloudflare, Inc.).

What to Verify Next

Anyone who encounters this domain through a link, advertisement or message should first confirm through the official channels of the genuine Jupiter brand, reached by typing its address manually or using a trusted bookmark, whether this domain has any affiliation with it. If the domain is linked to a brand or business the visitor already deals with, the contact should be confirmed by an independent route, such as a known phone number or an in-app support channel. Any wallet that has already interacted with this domain should be reviewed for token approvals, and any entered credentials should be rotated. Security teams may wish to block the domain and re-check it only if the operator demonstrates remediation. Evidence:

• Homepage: the "Home | Jupiter" title and brand styling are the only identity cues, and they cannot be tied to any named operator.
• Behaviour: the page's content changes after interaction, so any approval or signature request that appears after clicking may differ from what an initial inspection shows.
• Reputation: the current malicious ratings must be cleared by the reporting vendors before any reassessment is meaningful.

Summary Verdict

The site is rated critically low in trust and carries an elevated risk. Confirmed reputational blacklisting and deceptive page behaviour define its posture, and nothing observed on the site offsets them. The operator's real-world identity is unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address belongs to the provider's edge network. The origin server was not observable. This protective infrastructure mitigates exposure to generic network-level attacks, but it also prevents independent verification of where the content is hosted. It can mask rapid content swaps. It does not offset the reputational and behavioural findings, and it is no evidence of legitimacy.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Visitors should not log in, connect a wallet, sign transactions, enter credentials or make any payment on it. Organisations should block the domain, and the site should be viewed only in an isolated environment if it must be viewed at all.