jupiterexchange-airdrop[.]pages[.]dev

The domain jupiterexchange-airdrop.pages.dev is currently active and is flagged for brand impersonation, specifically targeting the Jupiter brand. There is no evidence of a crypto drainer kit being used, but the domain is designed to deceive users into believing it is an official Jupiter airdrop page, potentially leading to credential theft or financial loss.

Technical analysis reveals that jupiterexchange-airdrop.pages.dev has a VirusTotal score of 1/95, indicating that only one out of 95 security vendors has flagged this domain as malicious. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.173. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain appears on one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness.

The current status of the domain is active, and it remains a high-risk threat due to its ability to impersonate the Jupiter brand. Users are advised to avoid interacting with this domain and to verify the authenticity of any airdrop or promotional offers through official Jupiter channels. Security researchers and organizations should consider adding this domain to their blocklists to mitigate the risk of credential theft and financial fraud.