Protocol-impersonator domain registered (typosquat)
Jupiter Perpetual Exchange's assessment for RD-F-161 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Protocol-impersonator domain registered (typosquat). Two impersonator/typosquat domains identified within 90-day monitoring window: (a) jup.ag-rewards.lat — registered 2026-03-11 (66 days before assessment date; within 90-day threshold) via PDR Ltd. d/b/a PublicDomainRegistry.com; page title 'Jupiter | The Home of Onchain Finance' mimicked official site; currently offline. Reg-date delta: 66 days. (b) jup-ag.live — registered via WebNic.cc; resolved to IP 172.67.212.149 (Cloudflare proxy); assessed as low-risk crypto drainer; currently offline. Registration date not confirmed for F161 window assessment — treated as within window based on PhishDestroy report recency. Both domains are inactive at time of assessment but represent confirmed impersonation activity. The 2025-02-06 X account hack establishes Jupiter as a high-value phishing target justifying elevated typosquat vigilance.
Sources #
- URLPhishDestroy — jup.ag-rewards.lat ReportPhishDestroy — jup.ag-rewards.lat domain security report. Registered 2026-03-11 via PDR Ltd. Mimicked Jupiter official site title. Currently offline.retrieved 2026-05-16
- PhishDestroy — jup-ag.live ReportPhishDestroy — jup-ag.live domain security report. Low-risk crypto drainer, WebNic.cc, IP 172.67.212.149. Currently offline.retrieved 2026-05-16
Methodology #
Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.
See the full factor methodology and distribution across all protocols →