claim-jupiter[.]cc

claim-jupiter.cc is a phishing domain engaged in brand impersonation of Jupiter, a cryptocurrency platform, posing a high risk to users who may be tricked into connecting their wallets or entering credentials. The site has been taken offline, but it was designed to steal cryptocurrency by imitating Jupiter's login or approval interfaces. No drainer kit was identified, but the domain's purpose aligns with credential theft or wallet-draining scams.

Technical indicators confirm the domain's malicious nature: it was flagged by 2 of 95 VirusTotal vendors, including Forcepoint ThreatSeeker and SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered on December 5, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 2606:4700:3031::6815:3c85, hosted in the US by Cloudflare, Inc. The page title observed was 'Just a moment...', and no SSL certificate was issued. Google Safe Browsing did not flag it, but the Gridinsoft trust score is 0/100, indicating high risk.

Users who may have interacted with claim-jupiter.cc should take immediate action. If they connected a cryptocurrency wallet, they must revoke all token approvals for that address and transfer funds to a new wallet with a fresh seed phrase. If they entered login credentials, they should change passwords for any associated accounts, enable two-factor authentication, and monitor for unauthorized transactions. Report the domain to PhishDestroy and other blocklists to help protect others.