# jupiterswap.net — SUSPICIOUS

> jupiterswap.net is a brand impersonation domain impersonating Jupiter. It hosts a crypto drainer kit and is unreported on Google Safe Browsing.

## Summary
PhishDestroy identifies jupiterswap.net as an active brand impersonation domain targeting Jupiter users. The domain resolves to IP 116.251.217.5 and was registered on January 28, 26, through NameSilo, LLC. Security telemetry shows it serves a crypto drainer kit designed to steal wallet credentials and drain approved tokens without user consent.    This domain exhibits the following technical indicators: a VirusTotal detection ratio of 0/95, a Let’s Encrypt SSL certificate, and no current blocklist presence on Google Safe Browsing. The domain’s recent creation date and minimal detection footprint suggest it is a newly deployed threat vector still under the radar of major security vendors.    Status remains under investigation with active takedown coordination underway. Remaining risk is medium-to-high due to the absence of vendor blocking and the domain’s use of a legitimate-looking “Jupiter Swap” facade. Users are strongly advised to verify any unknown swap domains against PhishDestroy’s real-time blocklist before connecting wallets or signing transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Jupiter

## Domain Intelligence
- Registered: 2026-01-28 16:58:55
- Registrar: NameSilo, LLC
- IP: 116.251.217.5

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6c27ab1e-5c21-4337-bfb5-18d2dea38b47
- PhishDestroy: https://phishdestroy.io/domain/jupiterswap.net/
- LLM endpoint: https://phishdestroy.io/domain/jupiterswap.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/jupiterswap.net/
Last updated: 2026-03-28