jup[.]co[.]com

The domain jup.co.com was a brand-impersonation phishing site targeting users of the 'across' platform. It presented itself as a legitimate Across Protocol interface to harvest wallet credentials and seed phrases, fitting the 'seed_phish' and 'wallet_connect_phish' scam types. No crypto drainer kit was identified. The site is currently taken offline, but users who interacted with jup.co.com should treat any credentials or wallet connections as compromised.

Technical indicators confirm jup.co.com as malicious. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft (trust score 0/100) and Sophos. The domain was created on February 21, 2026, and resolved to IP address 185.208.156.66, hosted in Switzerland under AS42624. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by R11. Google Safe Browsing did not flag the domain, and no registrar information was available. The site returned an HTTP 530 status and displayed no page title.

Users who visited jup.co.com should immediately revoke any token approvals granted to the site and transfer funds to a new wallet. If seed phrases or private keys were entered, consider all associated wallets compromised. Change passwords for any accounts accessed from the same device, enable two-factor authentication, and monitor for unauthorized transactions. Report the phishing domain to the impersonated brand (Across Protocol) and submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities for further action.