jessi[.]today

PhishDestroy has identified jessi.today as a generic phishing domain currently under active investigation. The domain is suspected to host a crypto drainer—a type of malicious tool designed to steal cryptocurrency by intercepting and replacing wallet addresses during transactions.

This domain was flagged by 7 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious despite its suspicious activity. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP 172.67.223.123, and was created on April 26, 2026. With no current blocklist presence and no detections, the domain remains a low-profile but high-risk threat.

PhishDestroy advises users to avoid interacting with jessi.today and to verify any suspicious domains using PhishDestroy’s real-time threat intelligence. Organizations should consider blocking the domain and IP at the network perimeter. Users who may have already engaged with the site should immediately revoke any connected wallet permissions, transfer funds to a secure wallet, and scan their devices for malware.