Is jumperreward.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

A single-page web portal styled as an "Official Notice Delivery Service" for pre-trial legal claims in the State of New York. It names Sony Music Entertainment as claimant and a New York representative, and it says notices are issued on behalf of rights holders. It tells visitors that notices are reachable only through private links sent in notification messages, that a fixed window applies for recording a response, and that appeals must be filed through an account. No fees, products or payment flow are shown. The apparent purpose is to make recipients of an alleged copyright-claim message believe a court-bound process is under way, so that they click through, respond or sign in under time pressure.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The domain is blacklisted: an external threat-intelligence listing is active, and a major security vendor's feed independently flags it, with several further engines rating it suspicious. No brand-impersonation finding and no conflicting legal identities were established, so the elevated assessment rests on the blacklisting and on the page's own content. The homepage invokes a well-known rights holder and a named New York representative but gives no case reference, no checkable legal identity for either party, and an empty correspondence address. This is a classic pattern for pressure-based lure pages. The page states that it never asks for a password, verification code, payment details or software installation. It then says an appeal can only be filed through an account, and the sentence explaining which account is cut off mid-phrase ("you must use the a…"). That leaves the one sensitive action, account-based sign-in, unexplained. A stray line also reads "The reverse direct answer is impossible. Only the appeal.", which shuts off any alternative to the appeal path. Together with the garbled text and the claim of official standing without verifiable substance, the page combines claimed authority, urgency and a credential-gated exit. The site's design and clean technical behaviour do not offset this. The behavioural sandbox saw no external network calls, hidden forms or wallet activity, but that does not neutralise the content risk. Evidence:

• Homepage: names Sony Music Entertainment and a New York representative as claimant, with no case reference, no legal registration details and no populated correspondence address.
• Homepage: the stated "never asks for credentials" assurance sits beside an unexplained, truncated instruction that appeals require an account.
• Homepage: contains the non-standard line "The reverse direct answer is impossible. Only the appeal."
• Domain registered 2026-09-29 (~0.06 years, about three weeks old); 2 archive snapshots, both captured on 2026-09-30, so no prior history exists to support the "official" framing.

Regulatory Verification Notes

The page presents itself as an official legal-notice channel but cites no court, no statute or rule, no attorney or registration number, and no operating entity. No licence or registration is claimed, and no recognised registry connects the portal to the rights holder or representative it names. The page has no legal, privacy or terms sections of the kind a genuine notice-delivery service would carry, and no operator is identifiable anywhere on the site. This is a governance and disclosure failure, and here it adds to the active threat listing rather than standing alone. No third-party broker or regulatory-database entry was found for the site, so no reputational context offsets the picture. Evidence:

• Homepage: no named operating entity, court, statute, attorney registration or licence reference appears.
• Domain registered through NICENIC International Group Co., Limited on 2026-09-29, with expiry on 2027-09-29.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-28; this confirms encryption only and says nothing about the operator.

What to Verify Next

Anyone who received a message pointing to this portal should treat it as unconfirmed. They should contact the named rights holder directly, using contact details taken from that company's own official channels rather than from the message or the portal. They should also ask the court clerk or bar association in the relevant New York jurisdiction whether any matter or representative matches what the page says. The sender of the notification message should be checked through its full headers and an independent route, not through the portal's own links. Contact addresses and official support channels should likewise be confirmed independently of anything shown on the site. Evidence:

• Homepage: the claimant and representative are named without any identifiers that can be checked.
• Homepage: notices are said to be reachable only through private links, so the portal gives a recipient no independent way to confirm a claim.
• Homepage: the appeal instructions are cut off, so the actual appeal process cannot be reviewed.

Summary Verdict

The site carries a critical-risk posture. Active threat-intelligence listings combine with a legal-notice pattern that makes claims it cannot support. The infrastructure does not reduce the content-level risk. Apparent polish and clean sandbox behaviour are not signs of legitimacy here. The evidence points to a lure or pressure page and not to a genuine legal service.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge node, so the origin server is not visible. This offers some protection against direct attack, but it also means the hosting cannot be independently checked and the content can be swapped quickly. The domain is very recent and has few subdomains, which fits a short-lived deployment. These are weak signals, so the protective infrastructure counts only as a minor mitigating factor against the listings above. It does not show that the operator is legitimate.

Closing Assessment

The site should be treated as untrusted. It should not be used for sign-in, credential entry, payment or any response to a purported claim. Reading the page without interacting with it is the only reasonable use. Any related message should be reported to the supposed sender and to the relevant abuse or security channels.