jupi-ag[.]com

The domain jupi-ag.com is a confirmed phishing site engaged in brand impersonation targeting users of the Jupiter platform. It presented itself as an airdrop scam under the guise of the legitimate Jupiter brand, attempting to deceive victims into disclosing sensitive information or interacting with fraudulent schemes. No crypto drainer kit was identified in this campaign. As of the latest verification, jupi-ag.com has been taken offline.

Technical indicators confirm the malicious nature of jupi-ag.com. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Seclookup, and appeared on 3 security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. It was registered on 2025-08-27 01:34:51 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to the IP address 192.3.190.189, hosted on AS36352 (HostPapa) in the US. No SSL certificate was issued for the domain, and its nameservers were ns1.kanohost.com and ns2.kanohost.com. The observed page title was 'Instant | Jupiter', and Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with jupi-ag.com should immediately change any credentials or passwords entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider transferring funds to a new wallet. Report the domain to relevant platforms, such as Google Safe Browsing, anti-phishing organizations, or the impersonated brand (Jupiter) to aid in mitigation efforts.