jupiter-dex[.]icu

The domain jupiter-dex.icu was registered on November 14, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is presently offline. Infrastructure analysis shows the domain resolves to IP address 104.21.24.32, which is part of Cloudflare's AS13335 network located in the United States. The authoritative nameservers are art.ns.cloudflare.com and bonnie.ns.cloudflare.com, indicating Cloudflare DNS hosting. No TLS certificate is presented, leaving the site without HTTPS protection. The page title retrieved from the site, "Jupiter | Airdrop", aligns with the known phishing kit identified as an Airdrop Scam, a variant commonly used to lure victims into crypto‑related fraud.

Google Safe Browsing classifies the domain under social engineering, and the site appears on a single security blocklist, with PhishDestroy confirming the listing. VirusTotal reports that 14 of 95 scanning vendors flag the domain as malicious, reinforcing the indication of abuse. Gridinsoft assigns a trust score of 0 out of 100, effectively marking the domain as untrusted. The domain impersonates the legitimate brand Jupiter, targeting users with crypto airdrop promises, which matches the recorded scam type of a crypto scam.

While the site is offline, the historical evidence suggests it was actively used for brand‑impersonation phishing. Defenders should continue to block the domain at network perimeters, update URL filtering and threat intelligence feeds with the observed indicators, and monitor for any re‑registration attempts. Additional scrutiny of DNS queries to the associated Cloudflare nameservers may reveal related campaigns, and organizations should educate users about unsolicited airdrop communications that reference Jupiter. The combination of multiple vendor detections, a low trust score, and explicit brand impersonation elevates the risk rating to high, warranting proactive mitigation.