jupiter-dash[.]web[.]app

This domain, jupiter-dash.web.app, poses a high-risk threat by impersonating the Jupiter cryptocurrency platform. Visitors are presented with a fraudulent interface designed to harvest wallet credentials, private keys, or authorize malicious transactions under the guise of legitimate Jupiter services. The page title 'Instant | Jupiter' reinforces the deception by mimicking official branding, increasing the likelihood of user compromise through social engineering tactics. Analysis indicates the domain is hosted on Google's Firebase platform, registered through Google LLC, and secured with an SSL certificate issued by Google Trust Services (WR4). Infrastructure analysis reveals the site resolves to the IPv6 address 2620:0:890::100, located within AS54113 (Fastly, Inc.) in the United States. Detection metrics show minimal coverage, with only 1 of 95 security vendors flagging the domain on VirusTotal, though it appears on three independent security blocklists. The domain remains active as of this report, with no evidence of takedown or remediation efforts. Users who have interacted with jupiter-dash.web.app should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. If credentials were entered, assume they are compromised and avoid reusing them across other platforms. Report the incident to relevant security teams and consider submitting the domain to additional threat intelligence feeds to improve detection coverage.