jupiter[.]abhyuday[.]dev

The domain jupiter.abhyuday.dev is currently classified as a high‑risk, active brand‑impersonation campaign targeting the Jupiter brand. The site returns HTTP 200 and presents the page title “Jup Assignment”, which aligns with the declared brand target. Analysis links the activity to a wallet_connect_phish operation that leverages the publicly known Airdrop Scam phishing kit. Infrastructure analysis shows the domain resolves to 172.67.202.232, an address owned by AS13335 Cloudflare, Inc., located in the United States. Authoritative nameservers are mitch.ns.cloudflare.com and venus.ns.cloudflare.com, confirming Cloudflare as the DNS and CDN provider. Detected technologies include Node.js, React, Next.js, Vercel, Webpack, HSTS, and Cloudflare Browser Insights, indicating a modern JavaScript‑heavy front‑end. Threat intelligence flags the domain on one external blocklist and records a Gridinsoft trust score of 0 / 100, reflecting extreme malicious confidence. VirusTotal reports 2 out of 95 security vendors flagging the domain, reinforcing the suspicion despite the low detection ratio. The site is already blocked by PhishDestroy, and the combination of wallet‑connect phishing and the Airdrop Scam kit suggests attempts to harvest cryptocurrency wallet credentials. Defenders should immediately add jupiter.abhyuday.dev to URL filtering and DNS sinkhole policies, and monitor for any outbound connections to the 172.67.202.232 address. Continuous re‑evaluation of the domain’s reputation is advised, as the underlying infrastructure (Cloudflare) may be reused for other malicious payloads. Organizations using Jupiter‑related services should educate users about unsolicited wallet‑connect prompts and enforce multi‑factor authentication where possible.