jupiter-token[.]world

The domain jupiter-token.world is a confirmed phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate Jupiter service, posing an elevated risk of cryptocurrency scams. As of the latest verification, jupiter-token.world has been taken offline, though prior activity classified it as a phishing threat.

Technical analysis reveals that jupiter-token.world was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist, specifically PhishDestroy. It was registered through OwnRegistrar, Inc., though the creation date is not available. The site resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US, and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Nur einen Moment…', and the site employed Cloudflare technologies, including Browser Insights and HTTP/3. MX records pointed to _dc-mx.a57575e76d85.jupiter-token.world, with nameservers gracie.ns.cloudflare.com and patrick.ns.cloudflare.com.

Users who interacted with jupiter-token.world should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security team to aid in mitigation efforts.