jup[.]ag-api-connect-wallets-v2[.]app

The domain jup.ag-api-connect-wallets-v2.app is a phishing site that impersonates the brand Jupiter. This domain poses a specific risk of brand impersonation and is associated with a cryptocurrency scam. The site has been flagged as malicious by 1 of 95 security vendors on VirusTotal, including Fortinet, and appears on 1 security blocklist, PhishDestroy. The domain is currently taken offline, but it remains a potential threat due to its elevated risk level.

Technical indicators for jup.ag-api-connect-wallets-v2.app include a creation date of February 21, 2026, and an IP address of 172.67.150.180, which is located in the US and associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by WE1, and the domain has a Gridinsoft trust score of 0 out of 100. The page title observed is 'jup.ag-api-connect-wallets-v2.app', which aligns with its intent to mimic the Jupiter brand.

If a user has interacted with jup.ag-api-connect-wallets-v2.app, they should immediately revoke any token approvals and move their cryptocurrency funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any signs of unauthorized activity or fraud. Victims can report this phishing domain to their cryptocurrency exchange, Jupiter, and to the relevant authorities such as the FBI's Internet Crime Complaint Center (IC3).