jup[.]ag-api-wailet-v2-connects[.]com

The domain jup.ag-api-wailet-v2-connects.com is a phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with a legitimate Jupiter service, posing an elevated risk of cryptocurrency-related fraud. As of the latest verification, jup.ag-api-wailet-v2-connects.com has been taken offline, though it previously operated as an active scam.

Technical analysis of jup.ag-api-wailet-v2-connects.com reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned it a trust score of 0/100. It appeared on one security blocklist, PhishDestroy, but was not flagged by Google Safe Browsing. The domain was registered on February 21, 2026, and resolved to the IPv6 address 2606:4700:3033::ac43:c93e, hosted on Cloudflare's infrastructure in the US (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Access Denied'.

Users who may have interacted with jup.ag-api-wailet-v2-connects.com should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts to prevent unauthorized access. Report the domain to relevant platforms, including the impersonated brand (Jupiter), security vendors, and organizations like the Anti-Phishing Working Group (APWG) or local cybercrime units to aid in mitigation efforts.