jupiter-exchange[.]co

jupiter-exchange.co is a brand impersonation phishing domain that posed as Discord to deceive users into revealing login credentials or other sensitive information. The domain was created on February 21, 2026, and has been confirmed as a social media scam with a Gridinsoft trust score of 0/100. Its current status is taken offline, meaning it is no longer accessible and poses no immediate active threat, but users who interacted with it should take precautionary steps.

Technical indicators for jupiter-exchange.co include detection by 1 of 95 VirusTotal vendors (including Seclookup), while Google Safe Browsing did not flag it. The domain appears on 1 security blocklist (PhishDestroy) and resolves to IP address 172.67.177.139, which is located in the US and hosted by AS13395 Cloudflare, Inc. Its SSL certificate was issued by WE1, and the observed page title was 'Home | Jupiter'. The registrar information is not available.

To ensure safety, users who visited jupiter-exchange.co should change their Discord password immediately and enable two-factor authentication (2FA) on their account. Monitor for any unauthorized activity or fraud attempts, such as unusual login locations or messages sent from the account. Report the domain to Discord's trust and safety team and to PhishDestroy if not already done. Since no crypto drainer kit was associated with this domain, token approval revocation is not necessary, but general vigilance against similar brand impersonation phishing is advised.