claim-jupiter[.]org

The domain claim-jupiter.org is a phishing site engaged in brand impersonation, specifically targeting users of the Jupiter platform with a fake airdrop scam. It presents itself as a legitimate 'Jupiter Airdrop Claim' page to deceive victims into disclosing sensitive information or connecting wallets, though no crypto drainer kit was confirmed. As of the latest verification, claim-jupiter.org has been taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of claim-jupiter.org. The domain was flagged by 1 of 95 VirusTotal security vendors and appears on 2 security blocklists, including PhishDestroy and ScamSniffer. It was registered on 2025-09-18 16:21:12 through Web Commerce Communications Limited and resolved to the IP address 104.21.65.47, hosted on Cloudflare’s infrastructure (AS13335). No SSL certificate was issued for the domain, and its nameservers were gabriel.ns.cloudflare.com and selah.ns.cloudflare.com. The page title observed was 'Jupiter Airdrop Claim', reinforcing its impersonation of the Jupiter brand.

Users who visited claim-jupiter.org should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet to mitigate potential risks. If credentials were entered, change passwords for associated accounts and enable two-factor authentication. Report the domain to platforms like Google Safe Browsing, ScamSniffer, or PhishDestroy to aid in broader takedown efforts. Victims may also file complaints with their local cybercrime authorities or the impersonated brand’s security team for further assistance.