jupag-community[.]xyz

This domain, jupag-community.xyz, operates as a high-risk phishing site targeting users of the Jupiter cryptocurrency platform. The site mimics legitimate Jupiter token interfaces, presenting fake staking, airdrop, or swap portals designed to harvest wallet credentials and private keys. Victims who connect wallets or input sensitive information risk immediate unauthorized transactions, leading to irreversible token theft and financial loss. The site employs deceptive design elements, including cloned branding and urgent calls-to-action, to manipulate users into bypassing security precautions. Analysis indicates the domain was registered on June 12, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious registrations. Detection metrics reveal 16 out of 95 security vendors on VirusTotal flag the domain as malicious, while five independent security blocklists have listed it. The domain resolves to IP address 172.67.223.142, a Cloudflare-hosted endpoint leveraging HTTP/3 protocols, which may obscure origin infrastructure and complicate takedown efforts. Google Safe Browsing has classified the site under the SOCIAL_ENGINEERING category, confirming its intent to deceive users through fraudulent content. Users who have interacted with jupag-community.xyz should immediately disconnect any linked wallets from the site and revoke all connected dApp permissions. It is critical to transfer all assets to a new, secure wallet and monitor transaction histories for unauthorized activity. Enable multi-factor authentication on all cryptocurrency accounts and report the incident to relevant platform security teams. Avoid reusing passwords or seed phrases compromised during the interaction. If financial loss has occurred, file a report with local cybercrime authorities and provide all transaction hashes and timestamps for investigation.