jup[.]ag-register[.]app

PhishDestroy has identified jup.ag-register.app as a confirmed phishing domain engaged in brand impersonation of Jupiter. This fraudulent site was designed to deceive users into believing they were interacting with legitimate Jupiter-related services, likely to harvest sensitive credentials or cryptocurrency assets. The domain's suspicious nature was flagged through multiple intelligence sources.

Technical analysis reveals that the domain was registered through NiceNIC International Group Co., Limited and created on December 22, 2025, indicating a recent setup. It resolves to IP address 188.114.97.3 and holds an SSL certificate issued by Google Trust Services (WE1). VirusTotal data shows that 3 out of 95 security vendors flagged this domain as malicious, and it appears on 2 security blocklists, confirming its threat status. Google Safe Browsing (GSB) status was not explicitly provided but is implied by the blocklists.

Currently, jup.ag-register.app has been taken offline, reducing immediate risk. However, users who may have visited or interacted with the site should monitor for suspicious activity, particularly related to Jupiter accounts or cryptocurrency transactions. PhishDestroy recommends avoiding any links or communications referencing this domain and reporting further sightings to security teams. While the site is offline, residual risks from data exposure remain possible, so vigilance is advised.