claim-jupiter[.]pw

Analysis of claim-jupiter.pw, observed on July 24 2026, shows that the domain was created on 1 December 2025 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are denver.ns.cloudflare.com and imani.ns.cloudflare.com, and the domain resolves to IP 172.67.137.10, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented, and the HTTP response indicates the site is currently taken offline.

The page title returned when the site was reachable was “Nur einen Moment…”, and the content was classified as a crypto‑scam that impersonates the Jupiter brand. Gridinsoft assigned a trust score of 0 out of 100, indicating maximal suspicion. VirusTotal recorded a single positive detection out of 95 scanned engines, and the domain appears on one external blocklist, specifically PhishDestroy.

The limited detection footprint suggests the campaign may be in early stages or using low‑profile hosting. Defenders should block the domain and its resolving IP at network perimeter, monitor for any future DNS resolution changes, and add the domain to internal threat‑intel feeds. Continuous observation of Cloudflare‑hosted infrastructure for similar indicator patterns is recommended, as the attacker may shift to alternative IPs within the same ASN.