rewards-jup[.]pw

This domain, rewards-jup.pw, is identified as a cryptocurrency scam designed to impersonate the Jupiter platform and deceive users into claiming fraudulent JUP rewards. The site presents itself as a legitimate rewards portal under the title 'Jupiter Citizens · Claim your JUP rewards,' targeting users with social engineering tactics to extract sensitive credentials or wallet access. Analysis indicates the domain is explicitly crafted to exploit trust in the Jupiter brand, likely distributing malicious payloads or harvesting private keys through fake token distribution schemes. Infrastructure analysis reveals concrete indicators of compromise. The domain resolves to the IP address 188.114.96.3 and was registered on June 02, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com. It appears on three security blocklists and is flagged by one of ninety-five security vendors on VirusTotal, with additional detections by multiple threat intelligence feeds. The site employs Cloudflare for hosting and security, alongside Node.js and Express for backend operations, which may obscure further malicious activity. Google Safe Browsing has classified this domain under 'SOCIAL_ENGINEERING,' reinforcing its fraudulent intent. Users who visited rewards-jup.pw should immediately revoke any wallet permissions granted to the site and cease all interactions. If credentials or private keys were entered, affected wallets must be considered compromised, and funds should be transferred to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant threat intelligence platforms for further mitigation. Given the elevated risk level and confirmed offline status, ongoing vigilance is advised, as similar domains may re-emerge under different names or infrastructure.