jupterf[.]sonnik[.]dev

This domain, jupterf.sonnik.dev, poses as a legitimate Jupiter futures trading bot platform to deceive users into interacting with malicious smart contracts or draining wallets. The site specifically targets cryptocurrency holders by presenting itself as an automated trading tool, likely designed to trick victims into connecting their wallets or entering sensitive credentials. Given the brand impersonation and historical use of similar domains for crypto drainers, the threat primarily involves financial theft through unauthorized transactions or credential harvesting. Analysis indicates the domain was registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu. It resolves to the IP address 172.67.209.204 and is protected by Cloudflare, which obscures direct infrastructure analysis. The domain appears on one security blocklist, and VirusTotal reports 2 out of 95 security vendors flagging it as malicious. The SSL certificate is issued by Google Trust Services, and the site employs HSTS and HTTP/3, suggesting an attempt to appear legitimate while masking its true intent. If you visited jupterf.sonnik.dev or interacted with its content, immediately disconnect any connected wallets from the site. Revoke any suspicious smart contract approvals using a blockchain explorer or wallet management tool. Monitor your wallet for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Change passwords for any accounts where credentials may have been entered, and enable multi-factor authentication where available. Report the domain to relevant security teams or blocklist providers to aid in broader threat mitigation efforts.