jup-ag[.]world

jup-ag.world is a phishing domain involved in brand impersonation targeting the cryptocurrency space by mimicking the Jupiter brand. The site, associated with a scam type focused on cryptocurrency, has been taken offline and no known drainer kit was found. It presents a risk to users seeking services related to Jupiter due to its deceptive intent and impersonation tactics.

Technical analysis shows that jup-ag.world was created on February 21, 2026, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 104.21.76.87, hosted under AS13335 Cloudflare, Inc. It uses Cloudflare services including Cloudflare Browser Insights and HTTP/3, with an SSL certificate issued by Google Trust Services / WE1. The domain triggered detections by 2 out of 95 VirusTotal vendors, specifically Gridinsoft and SOCRadar, and appears on 3 security blocklists including PhishDestroy, MetaMask, and SEAL. The page title observed was 'Just a moment...' and the domain utilized nameservers norah.ns.cloudflare.com and leif.ns.cloudflare.com.

To mitigate risk from this brand impersonation phishing scam, users should avoid interacting with jup-ag.world and verify all cryptocurrency transactions carefully. Those who may have submitted credentials or authorized tokens should change passwords immediately, enable two-factor authentication, and move funds to new wallets if applicable. Any suspected fraud or phishing attempts involving jup-ag.world should be reported to security vendors and anti-phishing organizations to aid in ongoing blocklist updates. Users seeking safe interactions with Jupiter-branded services should use verified official websites only.