jup-on[.]us[.]com

The domain jup-on.us.com is a brand impersonation phishing site targeting Jupiter, a cryptocurrency platform. It poses as a hardware wallet service, as indicated by its page title 'JupOn Hardware Wallets - Professional Cryptocurrency Security with Air-Gapped Architecture', and is designed to steal credentials or funds from users. The domain is currently taken offline, but it remains under investigation due to its malicious intent.

Technical analysis of jup-on.us.com reveals multiple indicators of its phishing nature. The domain was registered on February 21, 2026, through Instra Corporation Pty Ltd., and resolves to IP address 172.67.214.242, which is hosted in the US by Cloudflare, Inc. (AS13335). Its SSL certificate is issued by Cloudflare TLS Issuing ECC CA 1. While VirusTotal shows 0 of 95 vendors detecting it and Google Safe Browsing has not flagged it, the domain appears on 1 security blocklist (PhishDestroy). The nameservers are ns1.centralnic.net, ns2.centralnic.net, ns3.centralnic.net, and ns4.centralnic.net.

To stay safe from such phishing threats, users should avoid interacting with jup-on.us.com or similar suspicious domains. If any credentials were entered on this site, immediately change passwords for the affected accounts and enable two-factor authentication (2FA) where possible. For cryptocurrency users, revoke any token approvals granted to the domain and move funds to a new, secure wallet. Report the domain to relevant authorities or security platforms to help prevent further abuse.