jupag-nft[.]pages[.]dev

The domain jupag-nft.pages.dev is a phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It posed as a fraudulent airdrop page to deceive users into disclosing sensitive information or transferring funds, classifying it as a cryptocurrency scam. No drainer kit was identified, and the site is currently taken offline, though it previously operated under the page title 'Jupiter | Airdrop'.

Technical indicators confirm jupag-nft.pages.dev as malicious. The domain was flagged by 3 of 95 VirusTotal security vendors, including Fortinet, Gridinsoft, and Trustwave, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). Registered through Cloudflare, Inc. on November 02, 2025, it resolved to the IP address 172.66.47.26, hosted by Cloudflare in the US (AS13335). No SSL certificate was issued, and Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with jupag-nft.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the domain to platforms like ScamAdviser, PhishTank, or the impersonated brand’s official abuse channels to assist in takedown efforts.