jupiter-extension[.]com

PhishDestroy identifies jupiter-extension.com as a live domain set up to mimic the official Jupiter Wallet, a popular cryptocurrency application. In plain terms, this site is a crypto drainer: it shows a fake Jupiter login page to trick visitors into entering their seed phrase or private key, allowing attackers to steal funds directly from connected wallets. Because it pretends to be the Jupiter Wallet extension, unsuspecting users may believe they are authenticating with the real service, only to unknowingly hand over control of their crypto assets to criminals. The page itself is styled to look legitimate, with the title Jupiter Wallet, but every action taken here leads to wallet drainers rather than the official Jupiter ecosystem. This domain was flagged by PhishDestroy on the same day it appeared in public radar. Key technical indicators include zero detections out of 95 VirusTotal scans, a domain creation date of April 07, 2026, and hosting on IP address 188.114.96.3 via the registrar Dynadot Inc. The site uses a Let’s Encrypt SSL certificate to create an appearance of legitimacy, but the certificate alone does not guarantee safety. Exact matching metrics such as the 2/95 VirusTotal score and creation date serve as concrete signals that this site is newly launched and largely unnoticed by major scanning engines, making it a higher-risk threat at this early stage. If you visited jupiter-extension.com or entered any wallet information, disconnect your wallet from the internet immediately and transfer remaining funds to a fresh wallet if possible. Do not reuse seed phrases or private keys anywhere else. Scan your device with updated antivirus software and consider revoking any permissions granted to suspicious browser extensions. Report the domain to PhishDestroy and your wallet provider so others can be warned. Always verify official extension sources through Jupiter’s verified channels before installing wallet software.