jupiter-swap[.]cc

This domain, jupiter-swap.cc, is identified as a brand impersonation phishing site targeting Jupiter, a Solana-based decentralized exchange. Analysis indicates the site mimics legitimate Jupiter swap interfaces, presenting itself as "Jupiter Swap – Best Solana Exchange for Fast & Low-Cost Token Swaps." The intent appears to deceive users into interacting with fraudulent smart contracts or disclosing wallet credentials, though no specific drainer kit signatures have been confirmed at this time. The domain exhibits characteristics consistent with crypto-focused phishing, including cloned branding and exchange functionality prompts. Infrastructure analysis reveals the domain was registered on August 25, 2025, through Spaceship, Inc., and resolves to the IP address 172.67.199.240. VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious. The domain currently appears on one security blocklist and holds a trust score of 0/100. No Google Safe Browsing (GSB) detections were reported at the time of analysis, though this may reflect delayed propagation rather than absence of risk. The domain has been taken offline following detection and blocking actions. Despite its current inactive status, residual risk remains due to potential infrastructure reuse or re-registration under similar naming conventions. Organizations are advised to monitor for related domains using Jupiter branding and to update blocklists with the provided indicators. Users should verify exchange URLs directly through official sources and avoid interacting with unsolicited swap or token prompts.