jysjysjpp[.]com

This domain, jysjysjpp.com, poses a specific crypto drainer threat targeting cryptocurrency wallet credentials. The site impersonates legitimate decentralized finance platforms to trick users into connecting their wallets or entering private keys, enabling attackers to drain digital assets. Infrastructure analysis indicates active hosting on IP 204.0.57.110 with an SSL certificate from Let's Encrypt, lending a false sense of security to unsuspecting visitors. The site remains operational as of the latest assessment, increasing the urgency of exposure.

Evidence from threat intelligence sources confirms a VirusTotal detection rate of 1/95 security vendors flagging this domain. The domain was registered through Dynadot Inc on April 13, 2026, which is notable for its recent creation date, a common indicator of malicious infrastructure. No blocklist count was provided in the given data, but the single vendor detection suggests limited initial visibility. The SSL certificate from Let's Encrypt is a free service frequently abused by threat actors. The resolved IP 204.0.57.110 has not been associated with other widespread threats in this analysis, but the combination of recent registration and low detection rate elevates the risk profile.

Users who have visited jysjysjpp.com should immediately disconnect their cryptocurrency wallets from the site, revoke any permissions granted, and transfer remaining assets to a new, secure wallet. Run a full security scan on the device used to access the domain. Monitor accounts for unauthorized transactions and change passwords for any associated services. Report the domain to relevant cybersecurity authorities and add it to personal blocklists. Do not revisit or interact with the site under any circumstances.