claim[.]jupiterdex[.]net

claim.jupiterdex.net is flagged as a brand‑impersonation site targeting the Jupiter brand. The domain was registered on 14 Nov 2025 through Web Commerce Communications Limited and resolves to the Cloudflare‑owned address 172.67.173.1, ASN 13335 (United States). Cloudflare serves the domain via the authoritative nameservers ali.ns.cloudflare.com and damian.ns.cloudflare.com. The site presents no SSL/TLS certificate, which is inconsistent with legitimate Jupiter services that normally enforce HTTPS.

Reputation checks show a Gridinsoft trust score of 0 / 100, and nine of ninety‑five VirusTotal scanners label the host as malicious. Google Safe Browsing flags the URL for social‑engineering content. The domain is listed on two public blocklists and is actively blocked by PhishDestroy and ScamSniffer. Analysis of the payload indicates the use of an “Airdrop Scam” phishing kit, a common vector for cryptocurrency‑related fraud.

The current operational status is offline, and no HTTP response or page title information is available, leaving the exact content unverified. Defenders should immediately deny any network traffic to 172.67.173.1 associated with this hostname, add the domain to internal URL filtering and DNS sinkhole rules, and monitor for newly‑registered subdomains that resolve to the same Cloudflare IP range. Continuous observation of Cloudflare‑hosted infrastructure linked to the Jupiter brand is recommended, as attackers frequently recycle IP space for repeat campaigns.