jaiclub23[.]com

PhishDestroy has flagged jaiclub23.com (seed: 5ee5c1) as an active fake login phishing domain operating under the guise of a generic crypto platform. The domain mimics a legitimate login portal to harvest user credentials and private wallet keys, redirecting victims to an embedded drainer kit hosted on the same infrastructure. While the exact victim brand is not yet confirmed, the site’s structure and certificate reuse align with known crypto phishing kits designed to siphon assets from unsuspecting users. This domain was flagged within 24 hours of registration, indicating a high-effort campaign likely leveraging urgency or exclusivity to pressure victims. This domain resolves to IP 188.114.97.3 and was registered through DYNADOT LLC on March 13, 2026—less than 48 hours prior to detection. Despite an untarnished VirusTotal score (9/95 detections) and a Google Trust Services SSL certificate, the domain remains unlisted on most blocklists due to its infancy. This presents a critical window of exposure, as threat actors often abuse newly registered domains to bypass automated filters. The absence of historical telemetry and low detection rate underscores the need for proactive real-time monitoring and user verification. As of today, jaiclub23.com remains active and unblocked across major browsers and security tools. PhishDestroy has flagged the domain and shared IOCs with industry partners, but the infrastructure’s newness and legitimate SSL credentials delay widespread takedowns. Users are advised to verify all crypto-related URLs via PhishDestroy before entering credentials or connecting wallets. The risk level remains under investigation, but early indicators suggest potential for rapid escalation as the campaign scales. Remain vigilant and report suspicious domains immediately to prevent asset loss.