drifts[.]trade

This domain, drifts.trade, is actively impersonating the Drift brand as part of a high-risk phishing campaign. Registered on July 15, 2026, through NameSilo, LLC, the domain resolves to the IP address 188.114.97.3 and presents a page titled 'DFX Claim,' which may indicate a fraudulent token or asset claim scheme targeting users of the Drift platform. The SSL certificate is issued by Google Trust Services, a common tactic to lend legitimacy to malicious sites. As of July 18, 2026, the domain appears on two security blocklists and is flagged by 2 of 95 security vendors on VirusTotal, suggesting limited but confirmed detection. It is currently blocked by MetaMask and SEAL, further supporting its classification as malicious. Defenders should treat this domain as hostile infrastructure and prioritize blocking it at the DNS, proxy, and endpoint levels. The exact content and functionality of the site remain unanalyzed, but the combination of brand impersonation, recent registration, and blocklist presence justifies immediate containment. No additional infrastructure or campaign linkages have been confirmed at this time.