jupiterdex[.]net

Analysis of jupiterdex.net shows a high‑risk brand‑impersonation infrastructure targeting the Jupiter brand. The domain was registered on 14 November 2025 through Web Commerce Communications Limited and currently resolves to IP 172.67.173.1, an address owned by Cloudflare (AS13335) located in the United States. No SSL certificate is presented, indicating that encrypted transport is not available for any services that may be hosted on the domain. DNS resolution is delegated to Cloudflare nameservers ali.ns.cloudflare.com and damian.ns.cloudflare.com, a common pattern for fast‑flux or abuse‑hiding services.

The domain is listed on a single security blocklist and is actively blocked by PhishDestroy, confirming that at least one security vendor has identified it as malicious. Google Safe Browsing flags the domain for social‑engineering, and VirusTotal reports that ten of ninety‑five scanning engines have raised detections, reinforcing the suspicion of malicious activity. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. The publicly‑available intelligence classifies the operation as a crypto‑scam, though no additional payload or landing‑page details are available.

The site’s current HTTP status is offline, limiting immediate interaction but not removing the threat of future activation. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑activation, and add the IP address to threat‑intel feeds. Because no page title or content has been captured, further investigation is required to determine the exact phishing vector and any associated credential‑harvesting mechanisms.