# jupiter-aggrgtor-auth-en.pages.dev — SUSPICIOUS

> This Cloudflare-hosted domain impersonates Jupiter to steal login credentials. Avoid entering data on jupiter-aggrgtor-auth-en.pages.dev; it resolves to 188.114.

## Summary
PhishDestroy identifies jupiter-aggrgtor-auth-en.pages.dev as an active brand impersonation domain targeting Jupiter users. The page purports to provide an ‘authentication endpoint’ but is a credential-harvesting trap designed to trick victims into surrendering account credentials under the guise of a legitimate Jupiter login flow.

This domain was flagged with status ‘active’ and risk level ‘under_investigation’. It resolves to IP address 188.114.97.3 and is hosted by Cloudflare, Inc. via Pages.dev. It carries a Google Trust Services SSL certificate, but VirusTotal currently shows 0 detections out of 95 engines. No public blocklist entries were found during initial checks, and creation date remains unverified in public WHOIS and passive DNS feeds.

Users should treat any unsolicited link to jupiter-aggrgtor-auth-en.pages.dev as suspicious and avoid entering credentials. Jupiter customers are advised to access accounts only via the official domain (jupiter.money or verified app portals) and enable multi-factor authentication. Report suspicious activity directly to Jupiter’s security team and local CERT. Block the domain and its resolving IP at network perimeter to prevent accidental exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Jupiter

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/jupiter-aggrgtor-auth-en.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/jupiter-aggrgtor-auth-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/jupiter-aggrgtor-auth-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jupiter-aggrgtor-auth-en.pages.dev/
Last updated: 2026-04-08