claim-jupiter[.]pro

The domain claim-jupiter.pro is a phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It operates as a cryptocurrency scam, attempting to deceive users into interacting with fraudulent pages rather than deploying a drainer kit. As of the latest verification, claim-jupiter.pro has been taken offline, though its prior activity poses residual risks to victims.

Technical indicators confirm the elevated risk level of claim-jupiter.pro. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It is registered through Cloudflare, Inc., with nameservers aaden.ns.cloudflare.com and nataly.ns.cloudflare.com. The domain resolves to the IPv6 address 2606:4700:3036::ac43:a739, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was observed, and the page title displayed 'Just a moment...' during analysis. Gridinsoft assigned a trust score of 0/100 to claim-jupiter.pro.

Victims of claim-jupiter.pro should take immediate action to mitigate risks. Since this is a cryptocurrency scam, users should revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the domain to relevant platforms, including the impersonated brand (Jupiter), Cloudflare’s abuse team, and security blocklists like PhishDestroy. Additionally, victims may file complaints with local cybercrime units or organizations such as the FBI’s IC3.