officialjupiterin[.]pages[.]dev

The domain officialjupiterin.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Jupiter, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with an official Jupiter airdrop, but its purpose was to facilitate cryptocurrency scams. No drainer kit was identified, and the site is currently taken offline, though it remains under investigation for its activities and potential residual risks.

Technical analysis shows officialjupiterin.pages.dev was registered through Cloudflare, Inc. on February 21, 2026, with no SSL certificate issued. The domain resolved to the IPv6 address 2606:4700:310c::ac42:2f2c, hosted on Cloudflare's infrastructure in the US (AS13335). At the time of assessment, 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing did not list it as malicious. However, it appeared on one security blocklist, PhishDestroy. The observed page title was 'Jupiter | Airdrop', reinforcing its fraudulent intent to mimic legitimate Jupiter promotions.

Users who interacted with officialjupiterin.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the domain to platforms like PhishTank or the Anti-Phishing Working Group. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Reporting the domain to Cloudflare via their abuse portal may help prevent further misuse of their services.