jupiter-dex[.]pro

The domain jupiter-dex.pro was a phishing site engaged in brand impersonation targeting users of Jupiter, a cryptocurrency platform. It posed as a legitimate decentralized exchange (DEX) interface to deceive victims into connecting wallets, potentially leading to unauthorized transactions or fund theft. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, jupiter-dex.pro has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and Seclookup, and appeared on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc., with no creation date available, and resolved to the IP address 104.21.62.62, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the site employed technologies such as HSTS, Cloudflare, and HTTP/3. No page title was observed, and Gridinsoft assigned a trust score of 0/100.

Users who interacted with jupiter-dex.pro should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or BscScan. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand (Jupiter) to aid in takedown efforts. Enable two-factor authentication (2FA) on all accounts and remain vigilant for follow-up phishing attempts.