claim[.]jupiter[.]rip

On July 25, 2026, the domain claim.jupiter.rip was identified as an airdrop scam impersonating the brand Jupiter. The domain was flagged by Google Safe Browsing for social engineering, indicating a high likelihood of deceptive practices aimed at tricking users into divulging sensitive information. The domain is currently offline, which may suggest that the threat has been mitigated or that the operators have temporarily taken down the site to avoid detection and takedown efforts. The site's page title, 'Jupiter | Airdrop,' aligns with the impersonation of the Jupiter brand, further confirming the nature of the scam.

The domain resolves to the IP address 172.67.178.21, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain is registered through Cloudflare, Inc., and lacks an SSL certificate, which is a common characteristic of phishing sites. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, enhancing the credibility of the phishing claim. Gridinsoft has assigned the domain a trust score of 0/100, indicating a complete lack of trustworthiness.

Defenders are advised to block traffic to this domain and monitor for any reactivation or related malicious activities. The absence of nameservers further suggests that the domain is not actively hosted, supporting the current offline status. The specific nature of the scam, targeting users with a wallet/seed phishing kit, underscores the importance of user education and the implementation of robust security measures to prevent unauthorized access to digital assets.