jupdex[.]org

The domain jupdex.org was registered on February 21, 2026 through Spaceship, Inc. and is configured to use the authoritative nameservers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 91.92.243.31, which belongs to AS202412 Omegatech LTD based in the Netherlands. No SSL certificate is presented for the host, indicating that the service was reachable only over plain HTTP. The site’s HTML title, as captured before the domain was taken offline, reads "Jupiter DEX | Exchange Solana tokens," directly referencing the Jupiter brand and suggesting a crypto‑exchange façade. The threat classification aligns with a brand‑impersonation crypto scam targeting users of the Jupiter platform.

Multiple security products have identified the domain as malicious. Twelve of ninety‑five VirusTotal scanners flagged the host, and the domain appears on three independent blocklists. Defensive services including PhishDestroy, MetaMask and SEAL have added jupdex.org to their block lists, confirming that the infrastructure is recognized as a phishing vector for cryptocurrency users. The combination of brand‑specific page title, lack of TLS, and the presence on reputable blocklists strengthens the confidence that the site was used to lure victims into a fraudulent Solana token exchange.

Current operational status is offline, preventing real‑time verification of page content or additional HTTP headers. Consequently, the exact mechanics of the scam—such as credential‑stealing forms or malicious smart‑contract interactions—remain unverified. Analysts should continue to monitor the IP address 91.92.243.31 for any re‑hosting activity, and watch for new domains registered with the same registrar or nameservers that reference Jupiter or Solana‑related terminology. Network defenders are advised to block jupdex.