jellycheat[.]com

PhishDestroy identifies jellycheat.com as an active generic phishing domain. The site poses a confirmed threat to unsuspecting users through deceptive content designed to harvest credentials or sensitive information. Current analysis confirms the domain remains operational and engaged in malicious activities.

This domain, jellycheat.com, is a recently registered malicious site leveraging a valid SSL certificate issued by Let’s Encrypt for perceived legitimacy. According to technical assessments, the domain was flagged by 2 of 95 VirusTotal security vendors, resides on IP address 198.186.131.123, and is registered through Global Domain Group LLC. The registration date of March 24, 2020, suggests the threat actor has maintained operational persistence over several years. While domain reputation remains low due to limited blocklisting, the presence of encryption adds misleading credibility to phishing lures.

The elevated risk level of this domain stems from its active status and low detection coverage among security vendors, enabling continued access to potential victims. Threat actors may use this platform to impersonate established brands or services to trick users into divulging login credentials, financial data, or personal identifiable information. To mitigate risk, organizations and individuals should update browser blocklists to include jellycheat.com and monitor network traffic for connections to 198.186.131.123. Users are advised to avoid interacting with any content hosted on this domain and report suspicious communications to appropriate security teams. Enforcing DNS filtering rules and deploying updated threat intelligence feeds can significantly reduce exposure to this campaign.