VirusTotal
10 / 95
“Instant | Jupiter”
jupiter-solana.network — असत्यापित. ब्रांड प्रतिरूपण: Jupiter; घोटाले का प्रकार: Wallet/seed Phishing; Drainer: Solana Drainer. साक्ष्य सारांश: VirusTotal 10/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker); Google Safe Browsing flagged; PhishDestroy score 100/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
10 / 95
Threat flag recorded
रिपोर्ट करें11 community references
रिपोर्ट करेंprovider verdict: clean
रिपोर्ट करेंसंग्रहित रिपोर्ट
रिपोर्ट करें विश्लेषण पूरा हुआ
रिपोर्ट करेंOn July 25, 2026 the domain jupiter-solana.network was observed being taken offline after multiple security products flagged it as a high-risk crypto drainer targeting users of the Jupiter platform. The site presented the page title "Instant | Jupiter", indicating a direct attempt to mimic the legitimate Jupiter interface. Infrastructure analysis shows the domain resolves to 188.114.96.3, an address owned by Cloudflare (AS13335) located in the United States. Both authoritative nameservers are lynn.ns.cloudflare.com and walk.ns.cloudflare.com, confirming the use of Cloudflare's DNS service. Registration was performed through NiceNIC International Group Co., Limited, and no TLS certificate was presented, meaning the site was served over plain HTTP.
Google Safe Browsing classified the URL as social engineering, and the domain appears on a single security blocklist. The PhishDestroy feed also listed it as blocked. Gridinsoft assigned a trust score of 0/100, reflecting extreme malicious confidence. VirusTotal analysis recorded 10 detections out of 95 scanning engines, all labeling the site as a wallet/seed phishing front that deploys the Solana Drainer kit. The kit is known to harvest private keys and seed phrases from unsuspecting Solana users, enabling unauthorized fund transfers.
While the domain is currently offline, the observed indicators suggest a coordinated campaign that may have reused the same infrastructure for other malicious endpoints. Defenders should block the domain and its resolved IP at network perimeter devices, enforce TLS-only outbound policies to prevent accidental connections to non-encrypted services, and monitor for any related domains that resolve to the same Cloudflare IP range. Additionally, security teams should update endpoint detection rules with the observed page title "Instant | Jupiter" and the specific Solana Drainer signatures, and advise users of Jupiter to verify URLs and never disclose seed phrases to unsolicited web pages.
इस होस्ट के लिए संग्रहीत क्रॉलर-बनाम-ब्राउज़र अवलोकन, साथ ही केइतारो-शैली ट्रैफ़िक वितरण प्रणालियों के लिए लाइव फिंगरप्रिंट जांच।
स्कैनर नोट: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='jupiter-solana.network', port=80): Max retries exceeded with url: / (Caused by NewConnecti
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
एज-आईपी प्रतिष्ठा इस डोमेन के लिए जिम्मेदार नहीं है।
lynn.ns.cloudflare.comwalk.ns.cloudflare.comLocation describes the IP network.
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 समुदाय सदस्य ने रिपोर्ट किया; पहली बार 10/09/2025 को देखा गया
यदि आपने इस डोमेन के साथ इंटरैक्ट किया है, व्यक्तिगत जानकारी दर्ज की है, या क्रिप्टोकरेंसी वॉलेट कनेक्ट किया है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
Template-based draft · optional AI wording assistance requires separate consent
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंसंदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंहाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंलाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।
एक अनुमानित $51 billion 2024 में अवैध क्रिप्टो वॉलेट्स में प्रवाहित हुआ (source). यदि आपने के साथ इंटरैक्ट किया था jupiter-solana.network — अभी कार्रवाई करें।
के अनुसार एफबीआई, सबसे महत्वपूर्ण विवरण लेनदेन डेटा हैं:
0x5856...35985)jupiter-solana.network)भले ही आपके पास सभी विवरण न हों — फिर भी रिपोर्ट दर्ज करें. आंशिक जानकारी अभी भी जांच में मदद करती है।
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.