jupiter-dex[.]site

The domain jupiter-dex.site is a phishing site engaged in brand impersonation, specifically targeting users of Jupiter, a cryptocurrency platform. This site was designed to deceive visitors into believing it was an official Jupiter decentralized exchange (DEX) portal, posing an elevated risk of cryptocurrency scams. As of the latest verification, jupiter-dex.site has been taken offline, but its prior activity remains a concern for users who may have interacted with it.

Technical analysis of jupiter-dex.site reveals limited but notable detection. The domain was flagged by 3 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0 out of 100. It appeared on one security blocklist, PhishDestroy, and was registered through Web Commerce Communications Limited on November 12, 2025. The domain resolved to the IP address 172.67.209.249, hosted by Cloudflare in the United States (AS13335). No SSL certificate was issued, and the site returned an HTTP 530 status. Nameservers were amos.ns.cloudflare.com and kallie.ns.cloudflare.com.

Users who visited jupiter-dex.site should take immediate steps to secure their assets. If cryptocurrency transactions were attempted, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Monitor accounts for unauthorized activity and enable two-factor authentication (2FA) on all related platforms. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or the impersonated brand’s security team, to aid in further investigation and mitigation.