connect-jupier-exchage-cdn[.]pages[.]dev

The domain connect-jupier-exchage-cdn.pages.dev was registered on April 30 2026 and resolves to the Cloudflare‑hosted IP 188.114.97.3. It serves content over HTTPS using a Google Trust Services certificate (WE1) and enforces HSTS, HTTP/3, and Cloudflare security features. The page title returned by the server reads “Jupiter Exchange | Non-Custodial Solana DEX for Pro-Level Trading,” indicating a deliberate attempt to masquerade as a Jupiter‑branded cryptocurrency exchange. The site is classified as a fake exchange and is listed on one security blocklist, with PhishDestroy already blocking it. Infrastructure analysis shows the domain is managed through Cloudflare’s nameservers (leonard.ns.cloudflare.com, molly.ns.cloudflare.com) and is located in Canada according to the IP’s ASN. A Gridinsoft trust score of 0 / 100 further suggests a high likelihood of malicious intent. No malware detections have been reported by VirusTotal, but the absence of detections does not confirm safety. Current evidence is limited to the domain’s registration details, hosting configuration, and the brand‑impersonating page title; no payload or credential‑harvesting behavior has been observed. Defenders should block the domain at perimeter and DNS layers, add it to internal deny‑lists, and monitor for any related traffic to the 188.114.97.3 address. Users should be warned that any unsolicited communications referencing a “Jupiter Exchange” or Solana DEX may be fraudulent, and legitimate Jupiter services should be accessed only via verified official URLs.