jumperexchagne[.]app

Jumperexchagne.app is currently flagged as an elevated‑risk brand‑impersonation site targeting the Jupiter brand. The domain was registered on 21 February 2026 and resolves to the Amazon Web Services IP address 52.223.13.41, which is announced by AS16509 (Amazon.com, Inc.) and geolocated to the United States. The host presents a Go Daddy Secure Certificate Authority – G2 certificate, indicating that TLS is correctly deployed but offering no evidence of legitimacy. Analysis of public blocklists shows the domain is listed on two anti‑phishing repositories, PhishDestroy and ScamSniffer, confirming that it has been identified by independent security teams. Gridinsoft assigns a trust score of 0 / 100, the lowest possible rating, reinforcing the malicious classification.

VirusTotal records indicate that three of ninety‑three scanning engines have returned a positive detection for the domain, which aligns with the blocklist findings. No additional evidence such as page titles or Safe Browsing identifiers has been published, and the site’s HTTP response is currently offline, preventing further content inspection. The lack of a publicly visible page title or OTX mentions means that behavioral details remain unknown. Defenders should treat any traffic to jumperexchagne.app as hostile.

Immediate actions include adding the domain to internal deny lists, updating DNS filtering policies to block resolution of the IP address 52.223.13.41, and ensuring that endpoint protection products ingest the blocklist entries from PhishDestroy and ScamSniffer. Continuous monitoring of the hosting ASN (AS16509) for new domains that resolve to the same IP can help detect follow‑up campaigns. Because the SSL certificate is valid, network‑level inspection rather than certificate validation is required to identify the threat.