# juptier-swap.finance — SUSPICIOUS

> juptier-swap.finance is a crypto drainer posing as Jupiter. Flagged by 1 of 95 VirusTotal vendors, this brand impersonation site aims to steal funds.

## Summary
PhishDestroy identifies juptier-swap.finance as a confirmed brand impersonation scam targeting Jupiter users. The domain masquerades as a legitimate crypto swap platform to facilitate crypto drainer operations, with a current elevated risk level due to its deceptive nature and prior availability.  This domain was flagged by 1 of 95 VirusTotal security vendors and resolved to IP 104.21.48.56. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with a creation date of September 08, 2025. The domain utilized a Google Trust Services SSL certificate but has since been taken offline. No additional blocklist data is available at this time.  Mitigation steps for this brand impersonation crypto drainer threat include immediately blocking the domain juptier-swap.finance and IP 104.21.48.56 at the network perimeter. Users should verify destination URLs via official Jupiter channels and avoid entering credentials or approving transactions on suspicious sites. Report any interactions to Jupiter’s official security channels to aid in takedown efforts. Exercise heightened scrutiny for similar domains registered around the same timeline.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP ?)
- Target brand: Jupiter

## Domain Intelligence
- Registered: 2025-09-08 17:55:03
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.48.56

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a412d1c2-22f3-4b01-a5ac-2cf5ed1d9e41
- PhishDestroy: https://phishdestroy.io/domain/juptier-swap.finance/
- LLM endpoint: https://phishdestroy.io/domain/juptier-swap.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/juptier-swap.finance/
Last updated: 2026-04-14