jacklyx[.]com

Analysis conducted on 22 July 2026 identifies jacklyx.com as an offline infrastructure used for brand impersonation targeting the Blast brand. The domain was registered on 18 July 2025 via MAT BAO CORPORATION and resolves to the IPv4 address 57.129.97.29, which is announced by AS16276 (OVH SAS) in Germany. SSL/TLS certificates presented for the host list XUI.one as both issuer and subject, indicating a possible certificate reuse strategy. The public page title observed before takedown reads “JACKLYX | Enter the world of sport and stakes!”, consistent with the Gambler Scam kit attributed to the site. Gridinsoft assigns a trust score of 10 / 100, reflecting a low reputation.

VirusTotal analysis shows that 1 of 95 scanning engines flagged the domain, and the site appears on a single security blocklist. Defensive products such as PhishDestroy have already taken the domain offline. The kit classification as a Social Media Phishing campaign suggests that the attacker likely leveraged compromised social accounts to lure victims to the malicious page, though the exact lure and credential‑capture mechanisms have not been observed. Uncertainty remains regarding the full content of the landing page, the extent of victim exposure, and any additional infrastructure that may share the same IP or certificate.

No further evidence of active phishing forms or payloads is available due to the offline status. Defenders should continue to block jacklyx.com at perimeter filters, update URL filtering lists, and monitor for any resurgence of the domain or related hostnames. Sharing the indicators of compromise—including the domain, IP address, SSL fingerprint, and associated blocklist identifiers—with threat‑intel platforms will aid coordinated response. Organizations using the Blast brand should issue user awareness advisories that reference the impersonation attempt and remind users to verify URLs before entering credentials.