jupag[.]pro

Domain jupag.pro has been identified as an active brand impersonation threat targeting the Jupiter platform. Current analysis indicates this domain is actively engaged in deceptive practices, masquerading as the legitimate Jupiter brand to deceive users and harvest sensitive credentials or financial data. The threat is classified as under investigation due to limited vendor detection, but early indicators suggest malicious intent given its appearance on multiple blocklists and known impersonation behavior. All users are advised to exercise extreme caution and avoid any interaction with this domain until further notice. jupag.pro is currently flagged by 5 of 95 VirusTotal vendors, demonstrating a concerning lack of detection despite its presence on 2 security blocklists. This domain resolves to IP address 104.21.83.58 and utilizes a Let's Encrypt SSL certificate to appear legitimate. While the exact registrar and creation date are not provided, the SSL issuance and IP assignment suggest recent operational activity. Trust scores for this domain remain critically low, and it has already been blocked by security solutions including Enkrypt and ScamSniffer. The current status of this domain remains active, with no signs of takedown or remediation. Given the brand impersonation tactics and low detection rate, the risk of user exposure to phishing or credential harvesting attacks is elevated. Security teams and end users should immediately block jupag.pro at the network and host levels. Additionally, any employees or customers who may have interacted with this domain should be notified to reset credentials, monitor for unauthorized transactions, and report suspicious activity to Jupiter’s official security channels. Further intelligence and IOCs will be provided as the investigation progresses.