jellyjellyvc[.]com

Analysis of the domain jellyjellyvc.com indicates it was a fraudulent crypto airdrop scheme targeting users with a fake 'WOBBLES - Mascot Memecoin Airdrop' offer. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolved to IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). Nameservers elinore.ns.cloudflare.com and renan.ns.cloudflare.com were in use, and the site employed Cloudflare technologies including HSTS and HTTP/3. The SSL certificate was issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites. Security vendors have flagged this domain as malicious.

As of the latest available data, 2 out of 93 security vendors on VirusTotal detected the domain, while four independent security blocklists have listed it. The domain was explicitly blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL, all of which specialize in cryptocurrency-related threats. Gridinsoft assigned a trust score of 0/100, further confirming its classification as high-risk. The identified phishing kit is labeled 'Airdrop Scam,' aligning with the page title and scam type provided in the intelligence.

No legitimate affiliation with any cryptocurrency project or airdrop campaign has been established. The domain was taken offline by the time of this report, though defenders should treat any residual DNS records or cached content as malicious. Organizations are advised to block the domain at the DNS level, update web filtering rules, and alert users who may have interacted with the site prior to its takedown. Given the use of Cloudflare infrastructure, defenders should also monitor for similar domains leveraging the same nameservers or IP ranges, as threat actors frequently reuse hosting providers for phishing campaigns.