Security Scan Report: ondo-migrate.vercel.app

Redirected to:
https://ondo-migrate.vercel.app/?code=SX-FAA7C-73
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 5 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://ondo-migrate.vercel.app

Effective URL:
https://ondo-migrate.vercel.app/?code=SX-FAA7C-73
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake 'Jupiter Jupuary' airdrop hosted on an unrelated vercel.app subdomain, asking users to connect a wallet to 'claim allocations' — a crypto-drainer impersonation, also flagged as phishing in threat intel.

Risk Factors (5)
Brand impersonation of Jupiter's 'Jupuary' airdrop on a non-official domain
Deceptive hostname ('ondo-migrate') contradicting the claimed Jupiter brand
Wallet-connect eligibility/claim lure consistent with a crypto drainer
Primary domain reported as phishing (single-source)
Free hosting-platform subdomain with unknown age and no reputation
Domain age information unavailable

Details

Page Title

Jupiter | Final Jupuary

Scan Type

public

Domain Name Analysis

The domain name 'ondo-migrate.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'ondo-migrate'. The registrable portion 'vercel' spans 6 characters with two vowels and 4 consonants. Splitting it apart reveals 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ondo-migrate.vercel.app

Page Load Overview

0.42s
Total Load Time
224 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:190 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking69% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
69%
government public service
57%
cryptocurrency blockchain
40%
technology software
39%
news media journalism
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.13.147Google · CDNUnited States
AS15169Google LLC
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.20.99Google · CDNUnited States
AS15169Google LLC
1142.251.20.106Google · CDNUnited States
AS15169Google LLC
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
1110--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127518372A2045517A3230B84B411F7BD318B921ACF4A587257F903E9DBDAEC2C8B52AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nE2v6pN6NtOmZWOBv/OBxkv1073VMTwNfgJrA/DWu:nE2v6+OmcOBv/OBmMiTwNfwrA/DV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2506:IEAACChAAwAAAABBAAAgYAgAAgAwALAACFCAQBAABACRQCACAQkAAAAQRICSABhEAAAAEEAIAEAAABBQgQYAAAAABAAAQMAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:993366cc993366cc
Difference Hash:00001030b2001000
Wavelet Hash:3c3c3c3e3c3c3c1c
Color Hash:#40acbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data