jackdrift[.]today

PhishDestroy identifies jackdrift.today as an active fake tech support scam domain designed to deceive users into contacting bogus Microsoft support lines. This domain is currently engaged in phishing operations targeting unsuspecting victims under the guise of legitimate technical assistance, with evidence of recent malicious activity. Users are advised to avoid interaction and report the domain immediately.

This domain was flagged by 2 out of 95 VirusTotal vendors as of the latest scan, indicating it has evaded detection by most antivirus engines. The domain utilizes a Let’s Encrypt SSL certificate for added legitimacy and is registered under an unnamed registrar. The IP address associated with jackdrift.today resolves to a hosting provider known for accommodating fraudulent domains. The domain was created recently, on June 5, 2024, and has not yet been listed on major blocklists such as Google Safe Browsing, PhishTank, or OpenPhish. Trust scores from threat intelligence platforms such as Cisco Talos and Spamhaus remain unassigned due to the domain’s recent emergence, increasing the risk of undetected malicious activity.

The status of jackdrift.today remains active, with no signs of takedown or mitigation. Concrete recommendations for users include avoiding any interaction with the domain, reporting it to your email provider or browser’s security team, and updating local blocklists or firewall rules to block traffic to this domain. Organizations should deploy DNS filtering rules to prevent resolution of jackdrift.today across their networks. Immediate investigation is warranted for any users or systems that have interacted with this domain, as the threat of credential theft or system compromise remains high. Monitor for follow-on attacks, such as additional phishing emails or malware downloads, as threat actors often escalate operations following initial domain deployment.