jup-ag-swap-ten[.]vercel[.]app

Analysis of jup-ag-swap-ten.vercel.app indicates a confirmed phishing site targeting cryptocurrency users under the guise of a swap service. The domain, hosted on Vercel's platform, resolves to IP address 216.198.79.3 and has been flagged by PhishDestroy, appearing on at least one security blocklist as of August 2026. Infrastructure analysis reveals the use of Vercel's hosting infrastructure, a common vector for rapidly deployed phishing sites due to its ease of setup and free tier availability.

The domain's naming convention, incorporating 'jup-ag-swap,' suggests an attempt to mimic legitimate cryptocurrency swap services, though no specific brand impersonation has been confirmed through available evidence. No HTTP status, SSL certificate details, or page content analysis are currently available, limiting deeper technical assessment. The domain's detection by PhishDestroy provides concrete evidence of malicious intent, though the exact nature of the phishing mechanism—whether credential harvesting, wallet drainer, or fraudulent token swap—remains unconfirmed.

Defenders should treat this domain as active and high-risk, implementing immediate blocking at the network and endpoint levels. Security teams are advised to monitor for related subdomains or IP associations, as phishing campaigns on Vercel often employ rapid domain rotation. Given the domain's presence on a security blocklist and detection by a specialized anti-phishing vendor, organizations should prioritize this indicator in threat intelligence feeds and incident response workflows.