# starkware-malicious-dapp.pages.dev: Jediswap-branded $zkRWD airdrop claim page | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/
Machine-readable companion: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-03 08:23:59 UTC
- Selected availability observation: 2026-11-03T08:23:59Z
- Stored record updated: 2026-11-03 08:30:05 UTC
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
## Stored infrastructure
- Observed IP address: 172.66.44.251
- Registrar in stored WHOIS data: Cloudflare, Inc.
- Last stored HTTP status: 200 (observed: 2026-11-03T08:23:59Z)
- Registration date (registry RDAP, pages.dev): 2020-09-02 02:33:29 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1a081-ae18-76c8-9cfc-a8a67d7533d4/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/starkware-malicious-dapp.pages.dev
- Certificate Transparency search: https://crt.sh/?q=%25.starkware-malicious-dapp.pages.dev
- Web Archive lookup: https://web.archive.org/web/*/https://starkware-malicious-dapp.pages.dev/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy records starkware-malicious-dapp.pages.dev showing a Jediswap-branded page offering a $zkRWD token claim that prompts visitors to connect a wallet.
On 2026-11-03, starkware-malicious-dapp.pages.dev displayed a dark purple page branded with a Jediswap logo in the top-left corner, with an Airdrop section highlighted in the header. The page presents itself as an airdrop claim interface.
The main content is a centered card reading "AVAILABLE TO CLAIM $zkRWD" with the subtitle "Connect wallet to claim token" and a large gradient Connect wallet button beneath it. The visible interactions are the header and card wallet-connection buttons. PhishDestroy publishes this record as a report.
Package revision: 0d4559c8c8c343a0186be1c6359a1ff3faf6b4c97218e4d3e611ba778faea966
Text generated (not scan time): 2026-11-03 09:29:06
Reviewed evidence snapshot: {"domain":"starkware-malicious-dapp.pages.dev","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"starkware-malicious-dapp.pages.dev","final_host":"starkware-malicious-dapp.pages.dev","redirects":[{"to":"https://starkware-malicious-dapp.pages.dev/","from":"http://starkware-malicious-dapp.pages.dev/","status":307}],"captured_at":"2026-11-03T08:23:41.809000Z","uuid":"01a1a081-ae18-76c8-9cfc-a8a67d7533d4","report_url":"https://urlscan.io/result/01a1a081-ae18-76c8-9cfc-a8a67d7533d4/","sha256":"58077b3865f2072c8214c90d91f34f025356577bc8dc34c059d8f07a291f7ddb","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal_public_summary":"","page_paragraph_target_characters":678}
Source facts (timestamps as stored): {"record_id":1759351,"first_recorded_at":"2026-11-03 09:23:59","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":null,"numerator":null,"denominator":null,"malicious":null,"suspicious":null,"vendors":null,"observed_at":null,"checked_at":null,"fetched_at":null,"time_basis":"as stored; legacy timezone not established","record_source":"phishdestroy_process","vendor_labels":[],"vendor_names":[],"stats":null},"google_safe_browsing":{"source":"Google Safe Browsing","state":"not_checked","verdict":null,"checked_at":null},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1759351,"scope":"checked_url","observed_at":"2026-11-03T08:23:59Z","http_status":200,"http_observed_at":"2026-11-03T08:23:59Z","stored_http_code":200,"stored_http_observed_at":"2026-11-03T08:23:59Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan ยท 2026-11-03: https://urlscan.io/screenshots/01a1a081-ae18-76c8-9cfc-a8a67d7533d4.png
Captured: 2026-11-03 08:23:41 UTC
Source report: https://urlscan.io/result/01a1a081-ae18-76c8-9cfc-a8a67d7533d4/
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-03T08:26:54Z",
"uuid": "01a1a081-ae18-76c8-9cfc-a8a67d7533d4",
"scanned_at": "2026-11-03T08:23:41Z",
"final_url": "https://starkware-malicious-dapp.pages.dev/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://starkware-malicious-dapp.pages.dev/",
"from": "http://starkware-malicious-dapp.pages.dev/",
"status": 307
}
],
"ip": "172.66.44.251",
"domains": [
"static.testnet.jediswap.xyz",
"api-starknet-mainnet.dwellir.com"
],
"ips": [
"172.66.44.251"
],
"asns": [
"13335"
],
"link_domains": [
"info.v2.jediswap.xyz",
"app.v1.jediswap.xyz",
"docs.jediswap.xyz"
],
"doc_hash": "01190b7f33cbe8e9cdf5f8508e977085195c798652e433120e0f88e1edd401b1",
"script_hashes": [
"0937efbef27cfd3ab87d77da1157aea06edb68216637e63386536cd601066e53",
"d0347c20157a0ebdd8c5ddedd2f6406f8fb8e897f00502ba27c2fa17f35b6d7d",
"2d49583497be7440b55233de0b6d62415fbb717ec94cf1989eee52f0b248be3e"
],
"globals": [
"webpackChunk_jediswap_interface",
"regeneratorRuntime",
"__SENTRY__",
"_"
],
"storage_keys": [
"useFiltersExpanded"
],
"tls": {
"san": [
"starkware-malicious-dapp.pages.dev",
"*.starkware-malicious-dapp.pages.dev"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "starkware-malicious-dapp.pages.dev",
"protocol": "QUIC",
"valid_to": "2026-12-14T08:41:29Z",
"valid_from": "2026-09-15T07:42:49Z"
},
"domain_age_days": 816,
"apex_age_days": 816,
"tls_age_days": 49,
"tls_valid_days": 90,
"requests": 25,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 97,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"priority": "u=0,i"
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-03T08:28:35Z",
"mail_config": {
"spf_lookups": 0
},
"caa_records": {
"domain": "starkware-malicious-dapp.pages.dev"
},
"block_lists": {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
},
"archives": {
"last": "2025-04-01T16:00:18Z",
"first": "2024-08-08T12:59:21Z",
"changes": 2,
"days_archived": 6,
"scans_per_day": 0.02,
"avg_page_bytes": 1230
},
"social_tags": {
"ogUrl": "https://app.jediswap.xyz/",
"title": "JediSwap Interface",
"ogType": "website",
"ogImage": "./images/social-hero.png",
"ogTitle": "JediSwap Interface",
"themeColor": "#ffffff",
"description": "A community-led fully permissionless and composable AMM on Starknet.",
"twitterCard": "player",
"twitterSite": "@JediSwap",
"ogDescription": "A community-led fully permissionless and composable AMM on Starknet."
},
"trackers": {
"requests": 17
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 10,
"tls": 38,
"wait": 88,
"connect": 22,
"download": 0
},
"response_ms": 158
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"threats": {
"phishtank": true
},
"carbon": {
"bytes": 2559,
"co2_grams": 0.0001,
"cleaner_than": 95
},
"dns_server": {
"ns": [
{
"ip": "162.159.38.51",
"host": "meadow.ns.cloudflare.com"
},
{
"ip": "108.162.195.208",
"host": "odin.ns.cloudflare.com"
}
],
"zone": "starkware-malicious-dapp.pages.dev"
},
"location": {
"ip": "2606:4700:310c::ac42:2cfb",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "Montreal",
"country": "CA"
},
"ssl": {
"issuer": "Google Trust Services / WE1",
"subject": "starkware-malicious-dapp.pages.dev"
},
"dns": {
"A": [
"172.66.47.5",
"172.66.44.251"
],
"NS": [
"meadow.ns.cloudflare.com",
"odin.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"meadow.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414947501, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2606:4700:310c::ac42:2cfb",
"2606:4700:310c::ac42:2f05"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": "strict-origin-when-cross-origin",
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "2606:4700:310c::ac42:2cfb",
"family": 6
},
"redirects": {
"chain": [
"https://starkware-malicious-dapp.pages.dev"
]
},
"social_presence": {
"profiles": [
"https://x.com/JediSwap"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"link": "; rel=\"preconnect\", ; rel=\"preconnect\""
}
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://urlscan.io/screenshots/01a1a081-ae18-76c8-9cfc-a8a67d7533d4.png","source":"Stored capture","report_url":"https://urlscan.io/result/01a1a081-ae18-76c8-9cfc-a8a67d7533d4/","captured_at":"2026-11-03T08:23:41Z","sha256":"58077b3865f2072c8214c90d91f34f025356577bc8dc34c059d8f07a291f7ddb","model_image_sha256":"a369a4a3fa927418fd62f5fa428b38cb7c53f9f3082cdd14898721979c13508b","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/starkware-malicious-dapp.pages.dev/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1759351,
"scope": "checked_url",
"observed_at": "2026-11-03T08:23:59Z",
"http_status": 200,
"http_observed_at": "2026-11-03T08:23:59Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-03T08:23:59Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```