jof-tech[.]com[.]ng

PhishDestroy identifies jof-tech.com.ng as an active credential theft domain posing significant risks to visitors.

This domain is designed to steal login credentials by impersonating legitimate tech services. It uses a recently issued SSL certificate from Let's Encrypt to appear trustworthy, but its infrastructure is linked to known malicious activity. With only 1 out of 95 VirusTotal security vendors flagging it at the time of analysis, this domain flies under the radar while actively harvesting user data. The registration details remain unverified, but the infrastructure aligns with common tactics used by credential theft campaigns.

How PhishDestroy knows this domain is malicious: It resolves to IP 148.72.153.160, uses a Let's Encrypt SSL certificate, and has been active long enough to have been scanned by VirusTotal. It was flagged by just 1 of 95 security vendors, indicating it's under the radar but still a confirmed threat. Tech-focused credential theft is a preferred method for attackers to gain access to accounts, personal data, and financial information.

If you visited jof-tech.com.ng, immediately change any passwords entered and enable two-factor authentication on all accounts linked to those credentials. Scan your device for malware and avoid entering sensitive information on any website linked to this domain or its associated infrastructure. Report the domain to your security team or through PhishDestroy’s reporting system if you encountered suspicious activity.