bulljak[.]fun

The domain bulljak.fun was a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Jupiter. It posed an elevated risk as a cryptocurrency scam, presenting itself under the page title 'Bullish Wojak' to deceive victims into disclosing sensitive information or transferring assets. No drainer kit was identified, and the site is currently taken offline.

Technical indicators confirm bulljak.fun as malicious. At the time of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft, which assigned a trust score of 0/100. The domain appeared on 2 security blocklists, PhishDestroy and ScamSniffer, though Google Safe Browsing did not flag it. Created on February 21, 2026, bulljak.fun resolved to the IP address 45.67.85.152, hosted by Kuroit Limited (AS203363) in the United Kingdom. The SSL certificate was issued by R12.

Users who interacted with bulljak.fun should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to relevant platforms, such as Jupiter’s official support channels, and submit the URL to anti-phishing initiatives like PhishTank or Google Safe Browsing for broader protection.