jupiter-portfolios[.]top

PhishDestroy identifies jupiter-portfolios.top as an active fake Jupiter portfolio tracker using brand impersonation tactics to deceive users. The page title 'Portfolio Tracker | Jupiter' suggests an attempt to mimic Jupiter’s legitimate services, likely to harvest credentials or crypto funds under false pretenses. No crypto drainer kit artifacts have been confirmed yet, but the naming and branding alignment increase the risk of credential theft or asset exfiltration.

Technical indicators for this domain include a VirusTotal detection score of 4/95, registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolution to IP 172.67.146.186. The domain was created on April 11, 2026, and operates with an SSL certificate issued by Let’s Encrypt. It remains unblocked by Google Safe Browsing (GSB) and is not currently flagged on major threat intelligence blocklists.

This domain remains active as of the latest scan, posing a credible threat to users seeking financial portfolio tools. Immediate actions include blocking the domain at the network and DNS levels, flagging the registrar for abuse review, and updating security controls to detect similar impersonation attempts. While the risk is under investigation, the lack of detections and fresh registration date warrant a high-priority response to prevent potential credential theft or crypto drainer deployment.