nftclaims[.]com

Analysis of nftclaims.com shows a newly registered domain created on February 21, 2026 that is currently offline but was previously resolved to the IP address 188.114.96.3, an endpoint owned by Cloudflare (AS13335) located in the United States. The site presented the page title "Jupiter - The Premier CEX Alternative on Solana," a title commonly associated with legitimate Solana‑based exchange services, and the intelligence indicates the domain was used to impersonate the brand across. The SSL certificate labeled WE1 was observed, confirming that the site employed HTTPS, a typical tactic for increasing perceived legitimacy.

Security telemetry places the domain on one external blocklist and records a block by PhishDestroy, reinforcing the suspicion of malicious intent. VirusTotal scans reported that two of ninety‑three security vendors flagged the domain, providing independent confirmation of risk. The listed scam type is Wallet/Seed Phishing, suggesting that the site attempted to harvest private keys or seed phrases from unsuspecting users.

Because the site is now taken offline, real‑time content analysis is unavailable, leaving the exact phishing page layout and any embedded payloads unknown. Defenders should continue to block the domain at network perimeters, add the IP address to threat intelligence feeds, and monitor for any re‑registration attempts or similar domains using the same hosting provider. Users should be warned that any unsolicited request for wallet credentials referencing the "Jupiter" title is likely fraudulent, and they should verify URLs against official sources before providing any sensitive information.