jellyjar[.]xyz

PhishDestroy identifies jellyjar.xyz as an active crypto drainer scam under investigation. This domain is engineered to trick cryptocurrency users into connecting wallets and signing malicious transactions that drain funds. The site masquerades as a legitimate wallet or service interface, exploiting trust in familiar branding to prompt wallet connections and signature requests. Users who approve transactions risk irreversible asset loss, as drainers silently transfer tokens to attacker-controlled addresses without further prompts.

This domain was flagged with 1 out of 95 VirusTotal detections as of the latest scan, indicating it has not yet been widely blacklisted despite active abuse. It was registered through Namecheap Inc., resolves to IP address 76.76.21.21, and holds a valid Let's Encrypt SSL certificate. The domain was created on May 26, 2025, making it extremely new, which often correlates with higher risk due to limited historical reputation data. Although no blocklists or threat feeds currently flag it, the absence of detections may be due to its recent emergence rather than safety.

To avoid falling victim, never connect your wallet or sign transactions on untrusted sites. Always verify domains via reputable threat intelligence platforms like PhishDestroy before interacting. Double-check URLs for misspellings or unusual TLDs, and avoid clicking links from unsolicited messages. Use hardware wallets for sensitive operations and revoke any unauthorized smart contract approvals immediately using tools like revoke.cash. When in doubt, treat new or unfamiliar domains with extreme caution.