opennewpageallocation-ui.netlify.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of opennewpageallocation-ui.netlify.app
opennewpageallocation-ui.netlify.app appears to be a web page hosted on Netlify that presents itself as a cryptocurrency rewards or airdrop interface connected to the Jupiter ecosystem. The page title and metadata reference "Jupiter: The Home of Onchain Finance," and the screenshot shows a token allocation checker, reward timeline, leaderboard, and a prominent wallet-connection prompt intended to have visitors verify eligibility for a claimed token distribution.
Based on the visible content, the site may be attempting to mimic a decentralized-finance rewards portal rather than operating as a standalone business website. References to domains associated with the Jupiter brand appear in the page resources and linked domains, while the scanned subdomain itself uses a generic Netlify-hosted address that does not appear to be an official primary brand domain. This combination is commonly seen in temporary campaign pages, test deployments, or potentially deceptive look-alike pages.
The domain itself is a Netlify subdomain rather than a dedicated branded domain, and the naming pattern "opennewpageallocation-ui" does not clearly match a public-facing official service name. In context, the page appears to target cryptocurrency users by encouraging wallet connection and token-claim activity, which can carry elevated risk when presented outside an established official domain.
Safety Assessment for opennewpageallocation-ui.netlify.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and multiple web-classification sources categorized it as phishing or fraud-related. In addition, one phishing-focused threat database listed the domain, which is a stronger warning sign than a generic heuristic alone. Although one malware scan reported no flagged files, it still attached a generic suspicious label to the domain and several internal resources.
The page content also raises concern because it appears to imitate a cryptocurrency rewards or airdrop interface associated with Jupiter while being hosted on a generic Netlify subdomain rather than an obvious official brand domain. The screenshot shows a large token allocation claim, countdown elements, wallet-connection prompts, and reward messaging, all of which are patterns frequently used in credential-harvesting or wallet-draining campaigns. The domain's IP address is also listed on one mail-reputation blocklist; that signal is weaker than phishing detections, but it adds a small amount of caution rather than reassurance.
While the domain age and valid HTTPS certificate are positive technical factors, they do not outweigh the phishing classifications, blacklist listing, and the page's apparent brand-linked wallet-claim presentation. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by DigiCert and is hosted on Netlify infrastructure backed by AWS EC2 in Frankfurt, Germany. The scanned IP was 63.176.8.218, and the domain uses Name.com as registrar with nsone-managed nameservers. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From a security perspective, the main concerns are not certificate validity or hosting quality but the reputation signals and page behavior. The site is delivered from a hosted subdomain platform, which can make rapid deployment easier, and the scanned resources include multiple JavaScript files tied to wallet, campaign, and runtime behavior. That does not prove malicious activity by itself, but in combination with the phishing classifications and wallet-connection flow, it increases the technical risk profile at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?