jupi.pages.dev
Catégorie : Phishing
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de jupi.pages.dev
The domain jupi.pages.dev appears to host a webpage themed around Jupiter, a decentralized finance and cryptocurrency trading ecosystem. The page title and visible content present it as "Jupiter | The Home of Onchain Finance," with sections for swapping, perpetuals, lending, portfolio tools, and rewards. The screenshot specifically promotes an "Active Staking Rewards" claim flow and encourages visitors to connect a wallet to check eligibility.
Based on the page assets and outbound references, the site appears to borrow branding and navigation elements associated with the legitimate jup.ag ecosystem, including links to official-looking Jupiter resources and community pages. However, it is hosted on a pages.dev subdomain rather than the primary brand domain, which suggests it may be an independently published page rather than an official Jupiter property.
The site appears to target cryptocurrency users, particularly those interested in staking rewards and wallet-connected DeFi services. Because crypto reward-claim pages are commonly used in social engineering campaigns, the combination of wallet prompts, reward messaging, and brand-like presentation warrants careful scrutiny.
Évaluation de sécurité de jupi.pages.dev
This domain was flagged by 11 out of 91 security engines at the time of this scan, with multiple detections describing it as phishing or malicious. The page also closely resembles the branding of Jupiter's known web presence and links to jup.ag resources, while operating from jupi.pages.dev instead of the main brand domain. That resemblance may indicate a look-alike page intended to imitate a legitimate cryptocurrency platform.
The on-page content asks visitors to connect a wallet in order to check and claim staking rewards, which is a common pattern in crypto phishing campaigns. Although the malware scan did not identify flagged files and major content-malice blacklist databases were clean at the time of this scan, the domain's IP address was listed on one mail-reputation blocklist. That listing alone is a weaker signal, but in this case it appears alongside substantial multi-engine phishing detections and a brand-like presentation.
Taken together, the scan results and page behavior suggest elevated risk for visitors, especially anyone considering connecting a cryptocurrency wallet. Based on these findings, this website may pose potential risks to visitors.
Description technique
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure from IP address 172.66.44.92, with hosting geolocated to Canada based on available IP data. The domain is a pages.dev subdomain and uses Cloudflare nameservers. DNSSEC appears to be unsigned.
From a technical standpoint, the page did not show flagged files or malicious iframes in the provided scan, and external links were not flagged by the malware crawler. However, valid HTTPS and reputable hosting do not by themselves establish legitimacy, particularly for phishing pages hosted on shared publishing platforms. The main technical concern here is the mismatch between the apparent Jupiter branding and the non-primary hosting domain.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?