jupiter-dexx[.]ac

This domain, jupiter-dexx.ac, was registered on August 8, 2025, through NiceNIC International Group Co., Limited, and is associated with brand impersonation targeting Jupiter, a known entity in the cryptocurrency space. Analysis indicates the domain was taken offline by the time of this report, though it previously resolved to the IP address 95.129.234.38, hosted under AS57724 (DDOS-GUARD LTD) in Russia. The domain lacks an SSL certificate, and its last observed HTTP response returned a 404 error page title, suggesting either a defunct or temporarily disabled scam operation. Security vendor detection is limited but notable: 13 of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist.

AlienVault OTX recorded its presence in a single threat intelligence pulse, while PhishDestroy previously blocked it. The domain's trust score from Gridinsoft is 0/100, reinforcing its high-risk classification. Nameservers point to Cloudflare (bruce.ns.cloudflare.com and wren.ns.cloudflare.com), a common tactic to obscure hosting details. While the domain is currently offline, defenders should treat any historical or future resolution of jupiter-dexx.ac as malicious.

The available evidence—including its registration details, hosting provider, and detection by multiple security vendors—supports its classification as a crypto scam impersonating Jupiter. No further content analysis is available, as the domain returned only a 404 error at the time of assessment. Organizations should ensure this domain is blocked at the DNS and proxy levels, and monitor for any reactivation or related infrastructure.