jup-official-chain[.]web[.]app

The domain jup-official-chain.web.app is identified as a high-risk brand impersonation threat and is currently active. This domain impersonates Discord, a popular communication platform, potentially to trick users into divulging sensitive information. The impersonation is carried out through a web page titled 'Swap | Jupiter,' which mimics Discord’s look and feel to deceive visitors.

Analysis indicates that the domain jup-official-chain.web.app is flagged by 5 of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through Google LLC and resolves to the IP address 199.36.158.100, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The SSL certificate for the domain is issued by Google Trust Services / WR4, which may contribute to user trust. The domain appears on 2 security blocklists and is flagged by Google Safe Browsing as a phishing site. While the exact creation date is not provided, the current status and flags indicate ongoing malicious activity.

Given the active status and high risk level, it is recommended that users avoid clicking on links or entering any personal information on jup-official-chain.web.app. Network administrators and security teams should consider blocking this domain and the associated IP address (199.36.158.100) to prevent potential data breaches. Additionally, users should verify the authenticity of Discord URLs and use official communication channels to ensure they are not interacting with a fraudulent site.