exchange-jup[.]icu

PhishDestroy identifies exchange-jup.icu as an active crypto wallet phishing domain designed to harvest credentials and digital assets. The domain mimics legitimate cryptocurrency exchange interfaces, tricking users into entering wallet credentials or private keys into fraudulent login portals. This method is particularly effective against users unfamiliar with phishing red flags, as the domain’s interface closely resembles authentic exchange platforms. Evidence supporting this threat assessment includes multiple security vendor detections: VirusTotal shows 5 out of 95 security vendors flagging the domain as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on April 10, 2026. It has already been listed on 2 security blocklists and is blocked by MetaMask and SEAL due to confirmed malicious activity. The domain resolves to IP address 188.114.96.3 and holds a valid SSL certificate issued by Let’s Encrypt, which may enhance its perceived legitimacy to potential victims. Users who visited exchange-jup.icu should take immediate action to protect their digital assets. First, avoid entering any credentials or private keys on this domain. Next, scan your device for malware using updated antivirus software. Finally, review your cryptocurrency wallets for unauthorized transactions or linked third-party applications. If you suspect exposure, rotate your wallet passwords and revoke any suspicious API permissions. Consider reporting the domain to your security team or relevant authorities to help prevent further victimization. Staying vigilant against evolving phishing tactics remains critical in safeguarding crypto assets.