allocation-jupiter[.]top

This domain is flagged for elevated-risk brand impersonation targeting Jupiter, a cryptocurrency platform. Analysis indicates the site presents a fraudulent allocation claim page titled 'JUP — Claim Your Allocation,' designed to deceive users into interacting with malicious smart contracts or disclosing wallet credentials. The threat type aligns with crypto drainer or token allocation scams, where victims are tricked into approving transactions that siphon funds from their wallets. Infrastructure analysis reveals the domain allocation-jupiter.top was registered on April 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 172.67.202.174, a Cloudflare-associated endpoint that may obscure further infrastructure details. Detection metrics show 9 out of 95 security vendors on VirusTotal flag the domain as malicious. Google Safe Browsing classifies the site under 'SOCIAL_ENGINEERING,' and it appears on at least one security blocklist. Gridinsoft assigns a trust score of 0/100, further confirming its high-risk status. The domain is actively blocked by PhishDestroy, a specialized phishing detection system. Mitigation steps for this threat type include immediate domain blocking at the network and endpoint levels. Organizations should update web filtering rules to deny access to allocation-jupiter.top and monitor for related domains registered through the same registrar or resolving to the same IP. Users should be educated on recognizing fake allocation claims, particularly those urging immediate wallet interactions. Cryptocurrency platforms should issue public warnings about this campaign and advise users to verify official communication channels before engaging with any allocation-related prompts. Wallet software providers may consider integrating real-time warnings for domains matching this threat profile.