jupiterclaimpr[.]pages[.]dev

The domain jupiterclaimpr.pages.dev is currently active and has been identified as a brand impersonation campaign targeting the Jupiter brand. The site returns HTTP 200, serves a valid SSL certificate from Google Trust Services, and operates behind Cloudflare infrastructure (ASN13335) with the IP address 172.66.44.168 located in the United States. Technical fingerprints show HSTS and HTTP/3 enabled, and the authoritative nameservers are cloe.ns.cloudflare.com and ian.ns.cloudflare.com. The page title observed is "Portfolio | Jupiter," indicating an attempt to appear as a legitimate Jupiter page. The domain was created on January 01, 2026 and is already listed on at least one security blocklist, with PhishDestroy reporting it as blocked. No detections have been reported by the 91 VirusTotal scanners that examined the site, but the absence of detections does not constitute a safety assurance. Because content beyond the title has not been publicly analyzed, the exact malicious behavior remains uncertain. Defenders should add the domain to DNS and web filtering deny lists, monitor for any related traffic, and continue to investigate the landing page for credential or data collection mechanisms. Ongoing analysis is recommended to determine the full scope of the impersonation and to update mitigation controls accordingly.