anyswapbot[.]xyz

This domain, anyswapbot.xyz, is actively engaged in brand impersonation targeting Jupiter, a well-known cryptocurrency platform. Analysis confirms the domain is currently operational and presents a high-risk threat to users who may mistake it for legitimate Jupiter services. The infrastructure and content are designed to deceive visitors into believing they are interacting with the official Jupiter platform, potentially leading to financial or data compromise. Infrastructure analysis reveals multiple concrete indicators of malicious intent. The domain was registered on June 2, 2026, through Dynadot LLC and resolves to the IP address 172.67.150.222. It is flagged by 17 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. Additionally, the domain appears on three security blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. The absence of an SSL certificate further underscores the lack of basic security measures, a common trait among fraudulent domains. The page title, 'Home | Jupiter,' explicitly mimics the branding of the legitimate platform, reinforcing the impersonation scheme. As of the latest assessment, anyswapbot.xyz remains active and continues to pose a significant threat. Users are strongly advised to avoid interacting with this domain or any associated links. Organizations should update their security controls to block access to this domain and its resolving IP address. For individuals who may have engaged with the site, immediate steps should include revoking any active sessions, resetting credentials, and monitoring accounts for unauthorized activity. Proactive measures, such as deploying domain-based blocking rules and educating users on recognizing brand impersonation tactics, are critical to mitigating this threat.