jupi.pages.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of jupi.pages.dev
The domain jupi.pages.dev appears to host a webpage themed around Jupiter, a decentralized finance and cryptocurrency trading ecosystem. The page title and visible content present it as "Jupiter | The Home of Onchain Finance," with sections for swapping, perpetuals, lending, portfolio tools, and rewards. The screenshot specifically promotes an "Active Staking Rewards" claim flow and encourages visitors to connect a wallet to check eligibility.
Based on the page assets and outbound references, the site appears to borrow branding and navigation elements associated with the legitimate jup.ag ecosystem, including links to official-looking Jupiter resources and community pages. However, it is hosted on a pages.dev subdomain rather than the primary brand domain, which suggests it may be an independently published page rather than an official Jupiter property.
The site appears to target cryptocurrency users, particularly those interested in staking rewards and wallet-connected DeFi services. Because crypto reward-claim pages are commonly used in social engineering campaigns, the combination of wallet prompts, reward messaging, and brand-like presentation warrants careful scrutiny.
Safety Assessment for jupi.pages.dev
This domain was flagged by 11 out of 91 security engines at the time of this scan, with multiple detections describing it as phishing or malicious. The page also closely resembles the branding of Jupiter's known web presence and links to jup.ag resources, while operating from jupi.pages.dev instead of the main brand domain. That resemblance may indicate a look-alike page intended to imitate a legitimate cryptocurrency platform.
The on-page content asks visitors to connect a wallet in order to check and claim staking rewards, which is a common pattern in crypto phishing campaigns. Although the malware scan did not identify flagged files and major content-malice blacklist databases were clean at the time of this scan, the domain's IP address was listed on one mail-reputation blocklist. That listing alone is a weaker signal, but in this case it appears alongside substantial multi-engine phishing detections and a brand-like presentation.
Taken together, the scan results and page behavior suggest elevated risk for visitors, especially anyone considering connecting a cryptocurrency wallet. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure from IP address 172.66.44.92, with hosting geolocated to Canada based on available IP data. The domain is a pages.dev subdomain and uses Cloudflare nameservers. DNSSEC appears to be unsigned.
From a technical standpoint, the page did not show flagged files or malicious iframes in the provided scan, and external links were not flagged by the malware crawler. However, valid HTTPS and reputable hosting do not by themselves establish legitimacy, particularly for phishing pages hosted on shared publishing platforms. The main technical concern here is the mismatch between the apparent Jupiter branding and the non-primary hosting domain.
Share your experience with this website. Was it safe? Did you encounter any issues?