Is the "Jupiter Foundation" airdrop real? No: Jupiter's Q3 ASR is on jup.ag, and the "Foundation" claim page is a look-alike registered today

Is the "Jupiter Foundation" airdrop real? No. The real rewards are Jupiter's Q3 ASR, and they're on Jupiter's own site. At 10:12 AM ET on 20 October, Jupiter's account, @JupiterExchange (about 615,600 followers), posted "Q3 ASR now LIVE for all wallets. Claim & Stake your JUP rewards." with a link to jup.ag. The "Jupiter Airdrop Is Now Available!" article from @JupiterFDNT, an account whose display name reads "Jupiter Foundation", isn't from @JupiterExchange, and its claim link doesn't go to jup.ag. Claim only through jup.ag, opened yourself, and don't connect a wallet to anything the article links to.

Where the article's link goes. The article lists a page on a free hosting service, site-ember-circle-3dc6.surge[.]sh. When we loaded it at 10:40 AM ET on 20 October, it redirected at once to a forwarding address on cloudcdn[.]dad, which sent us on to jupiter-foundaton[.]com/allocation: "foundaton", not "foundation". That domain was registered at 4:22 AM ET on 20 October through Dominet (HK) Limited, according to its registry record. The page there is titled "Jupiter Rewards Hub | Jupiter" and carries wallet-connect code (Reown AppKit) with Phantom support. We read its code as text and didn't connect a wallet, so we don't say what it asks for once a wallet connects. We don't link any of these addresses.

It is being pushed under Jupiter's real post. A minute after @JupiterExchange posted, @wmrichardjones replied "Q3 ASR rewards now live. Claim and stake your JUP.", followed by a long run of blank space and a link that reads x.com/Jupiter/status/2112300243245314253. That looks like Jupiter's own account, but X opens a post by its number, not the name in the link, and that number is @JupiterFDNT's article. The article went up at 5:49 PM ET on 19 October, the evening before the real launch, and had about 12,500 views by 10:40 AM ET on 20 October.

If you connected a wallet or signed anything on jupiter-foundaton[.]com, treat that wallet as exposed: move what's left to a fresh wallet and revoke any approvals you gave. For the real ASR, type jup.ag yourself rather than following a link in a reply. Our earlier check, the Jupiter airdrop checker, covers how Jupiter's real checker works. We'll add any new domain in this campaign as a dated line.