claim-jupiter[.]live

The domain claim-jupiter.live is a phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It operated as a cryptocurrency scam designed to deceive users into believing they were interacting with a legitimate Jupiter service. At present, claim-jupiter.live has been taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical analysis of claim-jupiter.live reveals limited detection, with 3 of 95 VirusTotal security vendors flagging the domain, including alphaMountain.ai, Gridinsoft, and SOCRadar. The domain was registered through Cloudflare, Inc., and resolved to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335) in the US. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Google Trust Services (WE1). The observed page title was 'Just a moment...', and the site employed Cloudflare technologies, including HTTP/3. No creation date was available for the domain, and its nameservers were emerson.ns.cloudflare.com and millie.ns.cloudflare.com.

Users who interacted with claim-jupiter.live should take immediate steps to secure their assets. Since this was a cryptocurrency scam, victims should revoke any token approvals granted to the site and transfer funds to a new wallet. Additionally, monitor accounts for unauthorized transactions and enable two-factor authentication (2FA) on all related services. To report the phishing domain, submit it to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand's official abuse channels.