jupiter-exchange[.]top

This domain is classified as a high-risk brand impersonation threat specifically designed to function as a crypto drainer. Analysis indicates the infrastructure targets users of the Jupiter decentralized exchange platform, employing deceptive interfaces to siphon cryptocurrency assets from victims' wallets during simulated transactions. Infrastructure analysis reveals the domain jupiter-exchange.top was registered through NameSilo, LLC on March 07, 2026, an unusually future-dated creation that may indicate falsified registration data. It resolves to the IP address 104.21.30.25 and employs Cloudflare services, including HTTP/3 and Browser Insights, alongside Node.js, Vue.js, and Nuxt.js technologies. The domain appears on four security blocklists and is flagged by Google Safe Browsing for social engineering. VirusTotal reports 15 out of 95 security vendors detect malicious activity associated with this domain. Additional blocking is implemented by MetaMask, PhishDestroy, SEAL, and InversionDNS, confirming its classification as a crypto-focused threat. The page title 'Home | Jupiter' further corroborates the brand impersonation intent. Users who interacted with this domain should immediately revoke any wallet permissions granted to the site through blockchain explorers or wallet management tools. All transactions originating from this domain should be treated as compromised, and affected wallets should be migrated to new addresses with fresh seed phrases. To prevent future exposure, users are advised to verify domain authenticity through official project documentation and employ browser-based security extensions that block known malicious domains. Wallet software should be configured to require explicit approval for all contract interactions, particularly those involving token swaps or liquidity operations that crypto drainers commonly exploit.