Security Scan Report: jupiter-foundation.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 6 domains to perform 41 HTTP transactions. The main domain is jupiter-foundation.org and was registered 4 days ago.

Submitted URL: https://jupiter-foundation.org/allocation

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake Jupiter airdrop claim site on a 1-day-old lookalike domain; 'connect wallet and sign' funnel backed by unranked .dad API — wallet-drainer phishing, avoid entirely.

Risk Factors (5)
Impersonation of the Jupiter (JUP / Solana DeFi) brand on a non-official domain
Domain only 1 day old and unranked in Cisco Umbrella
Wallet-connect / transaction-signing funnel aimed at draining funds, not a genuine claim portal
Cross-origin calls to unranked third-party endpoints, including a .dad-TLD host flagged by IDS
Countdown timers and fabricated eligibility/distribution statistics creating urgency
Domain age information unavailable

Details

Page Title

Jupiter Rewards Hub | Jupiter

Scan Type

public

Domain Name Analysis

The domain 'jupiter-foundation.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. Its registrable label 'jupiter-foundation' stretches across 18 characters split between eight vowels and 9 consonants; bonus characters include one hyphen. Segmentation suggests 2 words: jupiter, foundation. Median word length comes out to 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jupiter-foundation.org/allocation

Page Load Overview

1.05s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:922 chars
Detector Agreement:60%

Website Classification

Primary Category

cryptocurrency blockchain61% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
61%
adult content
30%
technology software
26%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6138.68.112.220Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
5206.72.200.6United States
AS19318Interserver, Inc
5188.166.132.94Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
5104.18.19.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.18.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.46.121Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.66.146.49Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.34.30Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
418--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0A2A765A3A2223B113345E8F59B736960B6424BD64FC010B7EC03695FCECD6EA635C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:81Uy35QGi72voUOi8pltSkA9ShlzbvlxjaoBJjFArXa:81Uy35Q/72voZi8plMkA94hbvlxF7jFJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21420:ALBLYCyw3EAhhoIAEAMhAR4CBLEAQLAAEAIhiELkRkbaCAFwTAwAZEENHAWom5SOFUqQIoAYQACwgYBYVKmBRghFQSgmQAo8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00036c6c7c2e8000
Perceptual Hash:93696c9669e3926c
Difference Hash:4122c8c8c8cc0c82
Wavelet Hash:e1037f6e7e7e8400
Color Hash:#1f5393

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data