dex-jupiter[.]net

The domain dex-jupiter.net was registered on November 14, 2025 through Web Commerce Communications Limited and is presently taken offline. DNS resolution points to the Cloudflare network (AS13335) with the address 188.114.97.3, hosted in the United States. The authoritative nameservers are margot.ns.cloudflare.com and robert.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP.

The page title observed during collection was "Jupiter | Airdrop", aligning with the reported phishing kit identified as an Airdrop Scam and classified as a crypto‑scam. Google Safe Browsing has flagged the domain for social engineering, and the site appears on a single security blocklist. Independent analysis by 12 of 95 VirusTotal security vendors marked the domain as malicious, reinforcing the suspicion of malicious intent. PhishDestroy has actively blocked the domain, confirming its involvement in brand impersonation targeting the cryptocurrency brand Jupiter.

While the infrastructure suggests a typical Cloudflare‑proxied phishing deployment, the lack of a valid SSL certificate and the offline status limit current interaction data. Defenders should continue to block resolutions to 188.114.97.3 in network controls, monitor for any re‑activation of the domain, and enforce email filtering rules that detect references to "Jupiter" and "Airdrop" in unsolicited messages. Ongoing observation of the registrar Web Commerce Communications Limited for related registrations is also advised, as threat actors often recycle similar registration patterns.