swapux-jup[.]icu

PhishDestroy identifies swapux-jup.icu as a live fake cryptocurrency exchange phishing domain under active investigation. The site mimics legitimate swap interfaces to harvest wallet credentials and private keys, posing severe financial risk to visitors. This domain is not yet widely blocked by detection engines despite clear malicious intent, requiring immediate caution from crypto users.

This domain was flagged with a generic_phishing threat type and currently carries an under_investigation risk level. Technical indicators include registration through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 24, 2026, resolution to IP 188.114.96.3, and a currently clean 3/95 detection score on VirusTotal. The Let's Encrypt SSL certificate provides false legitimacy while obscuring the domain's recent creation. As of this assessment, no major blocklists have flagged the domain, leaving potential victims exposed to direct interaction.

To mitigate exposure to this fake exchange phishing scheme, users should avoid visiting swapux-jup.icu entirely and verify any cryptocurrency-related URLs through official project websites. Wallet holders should immediately revoke any permissions granted to this domain and monitor on-chain activity for unauthorized transactions. Organizations should implement DNS filtering rules to block the domain and IP address at the network level. Report this domain to your security team and consider sharing indicators with threat intelligence platforms to accelerate broader blocking.