desktop-mobile-jupiterswap[.]pages[.]dev

PhishDestroy identifies desktop-mobile-jupiterswap.pages.dev as an active brand impersonation domain targeting the Jupiter cryptocurrency ecosystem. This site employs deceptive naming and messaging to trick users into believing it is an official JupiterSwap service, specifically designed to harvest credentials and drain crypto wallets. The operation remains ongoing despite security vendor scrutiny, indicating a persistent threat to Solana-based token swap users.

This domain was flagged by 0 of 95 VirusTotal vendors during the latest scan, suggesting it has evaded immediate detection despite its fraudulent nature. Registered through Cloudflare, Inc., the site resolves to IP 172.66.47.54 and uses a Google Trust Services SSL certificate to enhance credibility. While specific creation or blocklist data is not provided, the absence of detections highlights the need for proactive user vigilance and automated threat intelligence.

Users should avoid interacting with this site entirely, including clicking links, connecting cryptocurrency wallets, or entering any personal information. Always verify URLs and use official JupiterSwap channels for transactions. Report this domain to security platforms and browser vendors to aid in blocking efforts. Exercise extreme caution with any Solana-based swap services, and prioritize platforms with verified audits and established reputations.