jupiter-prodapp[.]com

PhishDestroy first observed jupiter-prodapp.com on Sep 16, 2025. The hostname explicitly references Jupiter; stored content metadata identifies the same apparent target. The captured page title is “Verification”. Stored page analysis classifies the content as crypto scam. Campaign clustering links the hostname to the Verification Scam kit. Current evidence score: 70/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and DNS security resolvers. VirusTotal recorded 3 detections among 91 engines: alphaMountain.ai, CRDF, Gridinsoft on Aug 1, 2026 at 02:53 UTC. DNS security checks returned 4 blocking results across 14 tested policies: Brand Jupiter, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Jun 27, 2026 at 04:05 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:40 UTC.

HTTP 502 was recorded on Aug 8, 2026 at 02:37 UTC; content was unavailable. Latest classified outcome: unknown; cause origin unreachable; mechanism http 5xx on Aug 8, 2026 at 00:37 UTC. Registration records for the domain list NiceNIC International Group Co., Limited as the registrar and Sep 15, 2025 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 192.3.190.188 on AS36352 (AS-COLOCROSSING, US). The recorded endpoint location is Buffalo, US. The stored server header is LiteSpeed. DOM analysis on Apr 23, 2026 at 19:24 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

The content indicators and 2 positive source findings support the current Jupiter-themed crypto scam classification.