drift-updates[.]live

This domain, drift-updates.live, was set up as a credential phishing trap. It tries to trick visitors into entering their usernames and passwords by mimicking a legitimate login page, often for popular services like email or social media. The page title was "Just a moment..." which is a common tactic to lull users into a false sense of security while the phishing form loads. If you entered any credentials on this site, your accounts could be compromised immediately.

PhishDestroy identified this threat through multiple indicators. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 11, 2026, giving it a very short lifespan typical of phishing operations. VirusTotal shows that 1 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. AlienVault OTX also found it in a threat intelligence pulse. The domain resolves to IP 188.114.96.3 and uses a Let's Encrypt SSL certificate (E7), which is common for phishing sites to appear legitimate. Fortunately, the site is currently offline, but the domain could be reactivated.

If you visited drift-updates.live and entered any personal information, change your passwords immediately for any accounts you may have used. Enable two-factor authentication on all important accounts and monitor your accounts for unusual activity. If you suspect your financial information was compromised, contact your bank. You can also report the domain to Google Safe Browsing and other cybersecurity authorities. Stay vigilant and always verify URLs before entering sensitive data.