jupiter-payment-exchange[.]vercel[.]app

This domain, jupiter-payment-exchange.vercel.app, poses as a legitimate payment gateway for Jupiter, a known cryptocurrency platform. Analysis indicates it functions as a crypto drainer, designed to trick users into authorizing malicious transactions that siphon funds from connected wallets. The site mimics the branding and interface of the authentic Jupiter service, increasing the likelihood of successful deception, particularly among users unfamiliar with security indicators. Infrastructure analysis reveals the domain was created on May 20, 2026, and is registered through Vercel Inc. It resolves to the IP address 64.29.17.3, hosted in the United States under Vercel’s infrastructure. The domain appears on three security blocklists and is flagged by 5 out of 95 security vendors on VirusTotal. Additional technical indicators include an SSL certificate issued by Google Trust Services (WR1) and a page title of 'Jupiter Payment Gateway,' further reinforcing its fraudulent intent. If you visited this domain or interacted with its content, immediately revoke any wallet permissions granted to the site. Disconnect all active sessions and review recent transactions for unauthorized activity. Scan connected devices for malware using updated security tools. Report the domain to relevant security teams and monitor accounts for signs of compromise. Users should verify the authenticity of payment gateways by cross-referencing official documentation and avoiding links from untrusted sources.