claim[.]jupiter[.]rip

claim.jupiter.rip is a subdomain of jupiter.rip. PhishDestroy first observed the hostname on Sep 27, 2025. Stored content metadata identifies Jupiter as the apparent target. The captured page title is “Jupiter | Airdrop”. Page analysis recorded additional brand references to Revolut and Solana. Stored page analysis classifies the content as wallet/seed phishing. Campaign clustering links the hostname to the Airdrop Scam kit. Current evidence score: 80/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, ScamSniffer, and Google Safe Browsing. VirusTotal recorded 9 detections among 95 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet, G-Data, Google Safebrowsing, Gridinsoft, Seclookup on Feb 23, 2026 at 05:49 UTC. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Feb 25, 2026 at 20:32 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:39 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:12 UTC; content was unavailable. Registration records for the registrable domain jupiter.rip list Cloudflare, Inc. as the registrar. At collection time, the hostname resolved to 172.67.178.21 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Mar 24, 2026 at 05:23 UTC returned 25/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

The content indicators and 3 positive source findings support the current Jupiter-themed reward-claim phishing classification.