collect-token[.]com

collect-token.com is a confirmed phishing site currently active and impersonating the Jupiter brand. The domain presents itself with the title "Jupiter | Airdrop," a classic lure used by threat actors to trick cryptocurrency users into connecting their wallets and authorizing malicious transactions that drain their funds. This domain has been classified as a high-risk brand impersonation threat by PhishDestroy's analysis.

Technical indicators confirm the dangerous nature of collect-token.com. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on May 14, 2026. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Let's Encrypt (E8). On VirusTotal, 2 out of 95 security vendors flag this domain as malicious, and it appears on 3 security blocklists. Furthermore, AlienVault OTX has identified it in 1 threat intelligence pulse, indicating active monitoring by the security community.

As of the latest check, collect-token.com remains active and poses an ongoing risk to users seeking legitimate Jupiter airdrops. PhishDestroy strongly advises users to avoid interacting with this domain or any site claiming to offer Jupiter airdrops without verifying through official channels. Do not connect your wallet, enter private keys, or share personal information on this site. If you have already interacted with it, consider your wallet compromised and take immediate steps to secure your assets.