jupag-nft[.]pages[.]dev
“Jupiter | Airdrop”
证据摘要
The domain jupag-nft.pages.dev is a phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It posed as a fraudulent airdrop page to deceive users into disclosing sensitive information or transferring funds, classifying it as a cryptocurrency scam. No drainer kit was identified, and the site is currently taken offline, though it previously operated under the page title 'Jupiter | Airdrop'.
Technical indicators confirm jupag-nft.pages.dev as malicious. The domain was flagged by 3 of 95 VirusTotal security vendors, including Fortinet, Gridinsoft, and Trustwave, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). Registered through Cloudflare, Inc. on November 02, 2025, it resolved to the IP address 172.66.47.26, hosted by Cloudflare in the US (AS13335). No SSL certificate was issued, and Google Safe Browsing did not flag the domain at the time of analysis.
Users who interacted with jupag-nft.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the domain to platforms like ScamAdviser, PhishTank, or the impersonated brand’s official abuse channels to assist in takedown efforts.
Data Coverage
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com |
malicious | Sinkholed |
| Quad9 DNS | afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com |
malicious | Sinkholed |
| DNS0 Zero | afumyacvizccbvqvzkoxuqrhyuaqopcopwfygjv.com |
malicious | Sinkholed |
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控