jupitersolana[.]xyz

jupitersolana.xyz was registered on 14 December 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to 188.114.96.3, an address owned by AS13335 Cloudflare, Inc., and is served by the Cloudflare nameservers deborah.ns.cloudflare.com and uriah.ns.cloudflare.com. No TLS certificate is presented, and the site currently returns no HTTP response as it is taken offline. The page title reported during the brief observation period is “Home | Jupiter”, matching the declared brand target “Jupiter” and indicating a brand‑impersonation attempt.

The associated scam type is listed as “Crypto Scam”, suggesting that the operator intended to lure victims into cryptocurrency‑related fraud. VirusTotal scans recorded 12 detections out of 95 security vendors, and the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The combination of a recent registration, Cloudflare‑based hosting, absence of TLS, and multiple vendor detections points to a deliberately crafted malicious infrastructure.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the site is offline and no content beyond the title was captured. Defenders should immediately add jupitersolana.xyz to network and endpoint deny lists, monitor DNS queries for the domain and its resolver IP, enforce TLS interception policies to prevent accidental connections, and watch for future domains registered with similar naming patterns or the same registrar. Continuous re‑evaluation of threat intelligence feeds is advised to capture any re‑activation of the site.