# jup-exchange.top — SUSPICIOUS

> PhishDestroy identifies jup-exchange.top as a Jupiter brand impersonation site with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies jup-exchange.top as a fraudulent domain designed to impersonate the legitimate Jupiter cryptocurrency exchange platform. This site is a crypto drainer, meaning it is engineered to trick visitors into connecting their crypto wallets and then silently drain funds from those wallets without explicit consent. The domain mimics Jupiter's branding and interface to appear legitimate, but it is not affiliated with the official Jupiter exchange in any way. Users who visit this site risk unauthorized transactions and financial loss.  This domain was flagged by PhishDestroy after being registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.96.3 and currently holds a valid SSL certificate issued by Let’s Encrypt. Importantly, it has not yet been detected by VirusTotal scanning services, with 0 out of 95 security engines flagging it as malicious at the time of investigation. This low detection rate does not indicate safety; rather, it suggests that the domain is newly active and may be operating under the radar of current security systems. The combination of fresh registration, low VT coverage, and active hosting strongly indicates a high-risk threat actor operation.  If you visited jup-exchange.top, immediately disconnect your crypto wallet from the site and revoke any permissions you may have granted. Check your wallet’s transaction history for unauthorized activity and consider transferring remaining funds to a secure, offline wallet. Do not enter any credentials or connect your wallet again to this domain. Report the domain to your antivirus provider and Jupiter’s official support channels to help block its spread. Stay vigilant for similar impersonation sites and verify URLs through official Jupiter channels before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Jupiter

## Domain Intelligence
- Registered: 2026-03-27 12:33:00
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b75e6ded-541d-4bd4-b39f-3ee3ac40260b
- PhishDestroy: https://phishdestroy.io/domain/jup-exchange.top/
- LLM endpoint: https://phishdestroy.io/domain/jup-exchange.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jup-exchange.top/
Last updated: 2026-03-28