claim-jupiter[.]info

Analysis of claim-jupiter.info as of 24 July 2026 shows the domain was registered through Cloudflare, Inc. and resolves to the Cloudflare edge address 104.21.83.137, located in the United States under ASN 13335. The site presented a page titled “Nur einen Moment…”, but no SSL certificate was observed, indicating HTTP‑only delivery. The domain is associated with a crypto‑scam that impersonates the Jupiter brand, as reflected in the supplied brand target field. Two of ninety‑five VirusTotal scanners flagged the domain, and Gridinsoft assigned a trust score of zero out of one hundred, underscoring a malicious reputation.

The domain is currently offline, has been blocked by the PhishDestroy service, and appears on one external security blocklist. Nameserver records point to may.ns.cloudflare.com and sevki.ns.cloudflare.com, consistent with Cloudflare‑based hosting. Evidence gaps remain: the exact content served before takedown, the presence of any credential‑capture forms, and the full scope of victim outreach have not been publicly disclosed. No SSL/TLS certificate was present, so traffic interception is possible, but the lack of an active site limits immediate observation.

Defenders should continue to block the IP 104.21.83.137 and the associated nameservers at network perimeter devices, update URL filtering lists with the domain, and monitor for any re‑registration attempts that reuse the same brand‑impersonation pattern. Threat‑intel feeds that reference the two VirusTotal detections and the zero‑score Gridinsoft rating should be leveraged to enrich alerts. Ongoing vigilance is advised, as Cloudflare’s wholesale hosting may enable rapid redeployment of similar infrastructure under different subdomains.