jup-dropping[.]live

PhishDestroy identifies jup-dropping.live as a domain engaged in brand impersonation targeting the Jupiter brand. The domain’s page title "Jupiter | Airdrop" suggests it attempts to lure victims with deceptive airdrop offers, a common tactic used in brand impersonation scams. No specific drainer kit has been detected on this domain, but the impersonation angle alone raises significant concerns about potential fraudulent activities.

Technical analysis reveals the domain resolves to IP address 104.21.30.12 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It was created recently on March 25, 2026, indicating a fresh threat potentially aiming to exploit the brand’s reputation. VirusTotal scanning shows 10 out of 95 engines flagged the domain, which may suggest it has not yet been widely reported or detected by automated systems. The domain uses a Let's Encrypt SSL certificate, lending it an appearance of legitimacy. There is no Google Safe Browsing block and no known blocklist entries at this time.

Currently, jup-dropping.live remains active and under investigation. Despite the clean VirusTotal score, the domain’s brand impersonation risk and recent creation warrant caution. Users should avoid engaging with any offers or links on this site, especially those promising airdrops or rewards related to Jupiter. Security teams should monitor this domain for changes in behavior or detection status and consider preemptive blocking due to its impersonation tactics and potential for future malicious use.