jupsreward[.]pages[.]dev

jupsreward.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and resolves to the Cloudflare address 188.114.96.3 (AS13335, United States). The site presents a page titled “Jupiter | Airdrop”, explicitly targeting the Jupiter brand with a fake airdrop lure. Analysis of public threat‑intel sources shows that 11 of 95 VirusTotal scanners flagged the domain as malicious, and it appears on two security blocklists.

It is also listed by PhishDestroy and ScamSniffer, and Google Safe Browsing classifies it as a social‑engineering threat. No TLS certificate is observed, indicating the site operates without HTTPS. The domain is currently taken offline, but the infrastructure – a Cloudflare‑protected IP and a newly created domain – suggests the operators could reactivate the site or clone the technique under a different name.

Defenders should block the IP 188.114.96.3, add the domain to local deny lists, and monitor for future registrations that reuse the “jupsreward” or similar “pages.dev” sub‑domains. Continuous observation of Cloudflare‑registered domains targeting the Jupiter brand is recommended, as the kit identified as “Airdrop Scam” is known to be repurposed across campaigns. Until further evidence emerges, the primary confidence lies in the observed impersonation of Jupiter, the confirmed blocklist listings, and the Google Safe Browsing social‑engineering flag.