jupiter.global
“Jupiter Global — Your onchain spending account”
jupiter.global — Ammantato · raggiungibile (HTTP 200). Simulazione del marchio: Jupiter; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 4/91 (Chong Lua Dao, CRDF, Gridinsoft, SOCRadar); cloaking observed; PhishDestroy score 86/100. Registrar: Porkbun.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Riepilogo delle prove
jupiter.global was first observed on March 2, 2026 and presents a page titled “Jupiter Global — Your onchain spending account”. The site mimics the legitimate Jupiter brand and targets cryptocurrency users, positioning itself as an on‑chain spending account. The domain is registered through Porkbun LLC and resolves to 104.21.10.76, an address owned by Cloudflare (AS13335) located in the United States. DNS resolution is served by ali.ns.cloudflare.com and leonard.ns.cloudflare.com, indicating the use of Cloudflare’s authoritative name servers.
The web server returns HTTP 200 and advertises a modern stack: Vercel front‑end, HTTP/3, HSTS, and Cloudflare Browser Insights. TLS is supplied by a Let’s Encrypt certificate labeled “E7”. No unusual server headers were observed beyond the standard Cloudflare delivery. The presence of Vercel suggests the site may be built on a popular static‑site framework, facilitating rapid deployment of copycat pages.
Threat intelligence flags the domain as high‑risk brand impersonation. VirusTotal recorded a single vendor detection out of 95 scanners, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one external blocklist and is actively listed by PhishDestroy. Despite the low number of VirusTotal detections, the combination of a zero trust score, confirmed brand misuse, and a cryptocurrency‑focused lure justifies a high risk rating.
Defenders should immediately block DNS resolution for jupiter.global and add the IP 104.21.10.76 to network deny lists. Continuous monitoring of Cloudflare‑hosted assets for similar brand‑impersonation patterns is advised, as the infrastructure can be replicated with minimal effort. Incident response teams should treat any credential or wallet address submissions to this site as compromised and advise affected users to revoke access and monitor for unauthorized transactions.
Forensic History & Detection Timeline
-
Cloudflare Radar Scan Mar 7, 2026 · 06:18 UTCCloudflare Radar scan registered: View Radar report.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Evasion evidence
Cloaking confirmed: scanners and victims see different content
The page served one response to a browser-like visitor and another to a crawler or security scanner. Cloaking exists only to keep reviewers away from the real landing page.
- Stored cloaking flag
- Observed
- Tipo di cloaking
content_split- Punteggio di cloaking
- 1/6
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
Acquisizione salvata · 2 sources
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 5 identified
Analisi di VirusTotal
Prove archiviate
Segnalazioni della comunità
Segnalato da 1 membro della comunità; prima osservazione il 02/03/2026
- Segnalazioni memorizzate
- 1
- URL segnalati univoci
- 1
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo