Is jupiter-desktop.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at jupiter-desktop.com presents itself as the "Jupiter Desktop App", a downloadable-style trading workspace pitched under the headline "Trade Solana from a focused workspace". Its apparent purpose is to draw visitors toward a Solana token-trading tool, a category in which users are normally asked to connect wallets or install software.

Scam/Impersonation Risk

This assessment is cautionary. Independent security intelligence shows hard contradictory signals. A multi-engine reputation scan of the domain returned a substantial cluster of malicious and suspicious detections, including detections from several well-established security vendors. That scan is the basis for the confirmed blacklisting of the domain. In addition, behavioural sandboxing of the homepage recorded malware-execution behaviour across repeated runs. This is a decisive indicator for any site that invites software installation or trading activity. The domain name pairs a recognised Solana trading brand with the word "desktop", and the homepage title reads as a product page for that ecosystem. No on-page evidence connects the site to the brand's genuine operators, so it should be treated as unaffiliated until proven otherwise. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms or external credential posts. These negative findings do not offset the threat detections, because the malicious behaviour recorded concerns what the site executes rather than what it asks visitors to type. No conflicting legal identities were found. Evidence:

• Homepage: titled "Jupiter Desktop App — Trade Solana from a focused workspace", with a trading-product positioning that implies software download or wallet use.
• Reputation scan of the domain: 11 malicious and 2 suspicious detections, with a critical-severity external blacklist flag active.
• Homepage sandbox: malware-execution behaviour recorded in 3 of 3 successful runs, with no external credential posts and no cloaking observed.
• Domain provenance: registered in 2026 (~0.11 years, about 41 days old); the web archive holds 1 snapshot, dated 2026, so there is no meaningful operating history.

Regulatory Verification Notes

The site gives no verifiable link between itself and a real-world operator. Identity could not be independently connected to any brand or person, and registration ownership details are incomplete, which is an administrative limitation rather than a contradiction. Page-level analysis could not confirm whether a licence or corporate registration is disclosed. No third-party broker or regulator record was matched for this domain, so there is no reputational signal in either direction. Trading and wallet-oriented products would ordinarily call for clear operator, jurisdiction and terms disclosures. Their absence leaves nothing that could offset the security findings. Technical hygiene is basic and sits behind a freshly registered domain. A valid DV certificate and conventional cloud hosting provide transport encryption only and say nothing about operator legitimacy. Evidence:

• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport security: TLS certificate issued by YR2 (DV, domain-validated only), valid to 2027-01-17.
• Registration: registrar NICENIC INTERNATIONAL GROUP CO., LIMITED; created 2026-09-10, expiring 2027-09-10.
• Broker/regulatory datasets: no matching entry for the domain.

What to Verify Next

Before any interaction, establish through the official Jupiter website and its verified social channels, reached independently of this domain, whether a desktop application exists and where it is legitimately distributed. Any download from this site should be treated as untrusted. Anyone who has already visited the site should check their device and wallet for unexpected installs, and revoke any wallet approvals granted from it. If a business relationship is being considered, the operator's legal entity and any trading-related licence should be confirmed directly with the relevant registry or regulator. Official contact channels should be confirmed through an independent route. Evidence:

• Homepage: promotes a Solana desktop trading product whose authenticity cannot be confirmed from the site alone.
• Registration record: a domain only weeks old gives no history on which to base trust in the operator.
• Reputation scan: the site's current threat detections make any download unsafe until independently cleared.

Summary Verdict

The overall posture is high risk. The site is a very recently registered domain, flagged as malicious by multiple independent security sources, with malicious behaviour recorded in sandboxing and no verified operator. Hard contradictory evidence outweighs the technical hygiene that is present, and the site should not be treated as a legitimate trading platform.

Infrastructure Integrity

The site is fronted by Vercel's CDN/WAF, and all observed addresses are edge servers on mainstream cloud infrastructure, so the origin host was not observable. This is a mitigating factor only. A large number of abuse reports attach to an address belonging to the shared provider. These are attributed to shared infrastructure and discounted, so they do not count against the site. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps, and it cannot offset the external threat detections.

Closing Assessment

Read-only viewing at most is the limit of reasonable interaction. Do not log in, connect a wallet, enter credentials, make payments or download or run anything from this site until it is independently verified and its threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 61 reports on hosting IP 216.198.79.65 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.