thej-piter-exch[.]at

Analysis of thej-piter-exch.at shows a deliberately crafted domain that impersonates the Jupiter brand, as indicated by the page title "Jupiter Exchange | Best Token Swap Aggregator on Solana" and the explicit identification of "Impersonates: jupiter" in the intelligence feed. The domain is registered through Key-Systems GmbH, a legitimate Austrian registrar, and uses Cloudflare's DNS infrastructure (addyson.ns.cloudflare.com, chase.ns.cloudflare.com) to resolve to the IP address 188.114.96.3, which is owned by AS13335 Cloudflare, Inc. and geolocated in the United States. No TLS certificate is present, leaving the site without HTTPS protection, which is consistent with many fast‑deployed scam sites that rely on quick domain turnover.

The site has been flagged by four of ninety‑five VirusTotal security vendors, appears on one external security blocklist, and is listed by PhishDestroy as a malicious entry, reinforcing the suspicion of malicious intent. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low confidence in the domain's legitimacy. The domain is currently offline, which may be the result of takedown actions or the operators abandoning the campaign; however, the historical evidence points to a crypto‑focused impersonation attempt aimed at deceiving users of the Jupiter token swap service.

Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor any residual traffic to the associated Cloudflare IP for potential reuse, and update threat intelligence feeds to include the observed indicators (domain name, IP address, nameservers, registrar, and lack of SSL). Since the content has not been captured in detail, further investigation of cached page snapshots could reveal additional malicious payloads or phishing forms, but the existing indicators already justify a high‑confidence classification of the site as a crypto brand impersonation scam.