# jup.ag-v4-wailet-app.com — SUSPICIOUS

> Warning: jup.ag-v4-wailet-app.com impersonates Jupiter brand and is flagged on blocklists. Avoid interaction; site is currently offline.

## Summary
PhishDestroy identifies jup.ag-v4-wailet-app.com as a medium-risk domain engaged in brand impersonation targeting Jupiter. This type of threat is concerning because it deceives users into trusting a fake website, potentially leading to credential theft or other malicious activities.

The domain was created recently on February 21, 2026, and is registered through MAT BAO CORPORATION. It appears on two security blocklists and is flagged by 3 out of 95 security vendors on VirusTotal. Currently, the site is offline and returns a "521: Web server is down" error, resolving to IP address 172.67.200.89.

Users are advised to avoid visiting or interacting with jup.ag-v4-wailet-app.com. If you suspect you have provided sensitive information, consider changing your Jupiter account credentials immediately and enable multi-factor authentication. Always verify URLs carefully and rely on official sources to access Jupiter services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: Jupiter
- Page title: ag-v4-wailet-app.com | 521: Web server is down

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: MAT BAO CORPORATION
- Country: VN
- IP: 172.67.200.89
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["alberto.ns.cloudflare.com", "mona.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Fortinet", "G-Data"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019803da-437b-7779-a8b4-22b0e442e084.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a46c27fa-89ca-4184-8f89-bde3cf44af7c
- PhishDestroy: https://phishdestroy.io/domain/jup.ag-v4-wailet-app.com/
- LLM endpoint: https://phishdestroy.io/domain/jup.ag-v4-wailet-app.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jup.ag-v4-wailet-app.com/
Last updated: 2026-03-19