claim[.]juplter[.]pro

The domain claim.juplter.pro is a confirmed phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It posed an elevated risk as a cryptocurrency scam, presenting itself as a legitimate Jupiter airdrop page to deceive users into disclosing sensitive information or transferring funds. No drainer kit was identified, but the site has since been taken offline.

Technical analysis of claim.juplter.pro reveals limited detection, with 2 of 95 VirusTotal security vendors flagging the domain, including alphaMountain.ai and Seclookup. The domain appears on 1 security blocklist, specifically PhishDestroy, while Google Safe Browsing has not flagged it. It resolved to the IP address 172.67.204.31, hosted on Cloudflare's infrastructure (AS13335) in the US. No SSL certificate was present, and the observed page title was 'Jupiter | Airdrop'. Registrar, creation date, and nameserver details are unavailable.

Users who interacted with claim.juplter.pro should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized transactions and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels.