jup[.]sx

Analysis of the domain jup.sx indicates that it is currently associated with a generic phishing campaign. The domain was registered on March 23, 2026 through PublicDomainRegistry and resolves to the Cloudflare IP address 104.21.31.132, which is geolocated to Canada. The SSL certificate in use is issued by Google Trust Services under the WE1 identifier, a common certificate for Cloudflare‑protected sites, and does not on its own provide assurance of legitimacy. Reputation data shows the domain appears on three independent security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL blocklist providers.

VirusTotal scanned the domain and six out of ninety‑four security vendors returned a malicious classification, reinforcing the phishing indication. Additionally, the Gridinsoft trust scoring system assigned a score of 0 out of 100, reflecting the lowest possible confidence in the domain's safety. The current operational status is offline, suggesting the hosting has been taken down or the site is otherwise unavailable, but the infrastructure remains observable.

No page title, brand targeting, or specific phishing kit details have been disclosed, so the exact content of the hosted page remains unverified. Defenders should continue to block jup.sx at the network perimeter, update proxy and DNS filtering policies with the known blocklist entries, and monitor for any re‑hosting attempts that might use the same IP range or certificate authority. Ongoing telemetry collection from endpoint and network sensors is advised to capture any residual malicious payloads or credential harvesting attempts that could have originated before the takedown.