jupiter-dapp-rho[.]vercel[.]app

The domain jupiter-dapp-rho.vercel.app was a brand impersonation phishing site targeting users of the Jupiter cryptocurrency platform. It posed as a legitimate Jupiter decentralized application (dApp) to deceive victims into interacting with fraudulent smart contracts or disclosing wallet credentials, though no specific drainer kit was identified. The site is currently taken offline, but its prior activity classified it as an elevated-risk scam.

Technical indicators show jupiter-dapp-rho.vercel.app was flagged by 2 of 95 VirusTotal security vendors, including CyRadar and Fortinet, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 64.29.17.67, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. Its SSL certificate was issued by Google Trust Services (WR1), and the observed page title returned a 404: NOT_FOUND HTTP status. Technologies detected included Vercel and HSTS, though the site no longer serves active content.

Users who interacted with jupiter-dapp-rho.vercel.app should immediately revoke any token approvals granted to unknown contracts using a tool like Revoke.cash or Etherscan. Move remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to Jupiter’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to prevent further abuse.