jup2[.]netlify[.]app

Analysis of jup2.netlify.app indicates a confirmed brand impersonation targeting Jupiter, a Solana-based decentralized exchange aggregator. The domain, hosted on Netlify infrastructure, was registered on May 14, 2025, and remains active as of July 12, 2026. Infrastructure analysis reveals the site resolves to IP address 35.157.26.135, with an SSL certificate issued by DigiCert Inc and HSTS enabled. The page title, 'Jupiter - The Premier CEX Alternative on Solana,' directly aligns with the legitimate Jupiter brand, reinforcing the impersonation threat. Security vendors have flagged this domain, with 11 of 95 engines on VirusTotal detecting malicious activity. The domain appears on at least one security blocklist and is explicitly blocked by PhishDestroy. While the exact content and functionality of the site have not been analyzed, the combination of brand impersonation, active hosting, and security vendor detections confirms a high-risk phishing operation. Defenders should treat this domain as malicious, block access at the network level, and monitor for related infrastructure or similar impersonation attempts targeting Jupiter or other Solana-based platforms. No additional threat indicators, such as associated malware or phishing kits, were identified in the available data.