jup-app[.]pro

Analysis of jup-app.pro indicates a high-risk brand impersonation domain targeting Jupiter, a known cryptocurrency platform. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and remains active as of July 12, 2026. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers bailey.ns.cloudflare.com and jaziel.ns.cloudflare.com, resolving to IP 172.67.220.232 in the US. The domain is currently returning an HTTP 301 redirect and a 522 connection timeout, suggesting either deliberate evasion or backend instability. Security vendors have flagged this domain on four blocklists, including PhishDestroy, MetaMask, SEAL, and ScamSniffer. While VirusTotal shows 7 of 93 vendors detecting malicious activity, this does not constitute exhaustive validation. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently suspicious provider. No specific phishing kit or payload has been confirmed in open-source intelligence, though the scam type is classified as a crypto scam. Defenders should treat this domain as actively malicious due to its brand impersonation, recent registration, and blocklist presence. Network-level blocking is recommended, particularly in environments handling cryptocurrency transactions. Further investigation into associated wallet addresses or redirect chains may reveal additional infrastructure, but no such details are currently available in public feeds.