jupmarkets[.]cloud

The domain jupmarkets.cloud has been identified as a brand impersonation threat specifically targeting the Jupiter platform, with security analysts flagging it as a crypto drainer designed to steal user credentials and digital assets. The page title 'JM — Unlock Your Genesis Allocation' is a classic lure used to trick victims into connecting their wallets under the guise of claiming a token allocation. This domain was created on March 15, 2026, and is registered through NameSilo, LLC, a registrar often associated with high-risk domains.

Technical indicators paint a clear picture of malicious intent: VirusTotal shows 2 out of 95 security vendors flagging the domain, and it already appears on one security blocklist. The domain resolves to IP address 172.67.182.129, which is within Cloudflare's range but commonly used for phishing infrastructure. While Google Safe Browsing has not yet flagged it, the elevated risk level and offline status suggest rapid takedown action was taken after detection. The combination of a recently registered domain, impersonation of a well-known DeFi brand, and a misleading title strongly indicates an organized crypto phishing campaign.

Currently, jupmarkets.cloud is offline, meaning the hosting provider or registrar has likely suspended the domain following security reports. However, the infrastructure behind it may still be active, and similar domains could reappear. Users should remain vigilant against unsolicited allocation claims and always verify URLs through official Jupiter channels. PhishDestroy recommends blocking this domain at the network level, educating users about brand impersonation tactics, and monitoring for related domains using the unique seed b67383 as a tracking identifier.