# www.videomemjob.buzz — MALICIOUS

> videomemjob.buzz poses as a job recruitment site but is a cryptocurrency drainer scam. Flagged by 14/95 security vendors, this domain resolves to 188.114.97.

## Summary
PhishDestroy identifies videomemjob.buzz as an active cryptocurrency drainer phishing domain posing as a job recruitment platform. The domain leverages social engineering tactics to trick users into connecting cryptocurrency wallets under the false pretense of employment opportunities. No specific brand or drainer kit has been publicly attributed to this campaign at this time, but the operational pattern aligns with recent high-risk cryptocurrency scams targeting job seekers.  

This domain was flagged by 14 out of 95 security vendors on VirusTotal, indicating elevated risk. It resolves to IP address 188.114.97.3 and was registered on June 15, 2025, through NameSilo, LLC. The domain holds a valid SSL certificate issued by Google Trust Services, which is commonly abused to appear legitimate. No current blocklist presence has been recorded in open-source threat intelligence feeds, suggesting this is a newly activated domain. The combination of recent registration, low VT detection ratio, and active hosting infrastructure points to a rapidly evolving threat with high evasion potential.  

As of the latest assessment, videomemjob.buzz remains active and is actively serving malicious content. Immediate user action is required to prevent financial loss. Users should block the domain at the network level and avoid any interaction. Organizations are advised to update firewall rules to deny traffic to 188.114.97.3 and monitor for lateral movement. While the domain’s SSL certificate may be revoked, the underlying infrastructure remains vulnerable to continued abuse. Remaining risk is assessed as elevated due to the domain’s youth, low detection coverage, and active operational status. Continuous monitoring and proactive blocking are essential to mitigate exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-15 10:40:49
- Registrar: NameSilo, LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9b56caaf-0172-4875-8320-9179ba6cd5f7
- PhishDestroy: https://phishdestroy.io/domain/www.videomemjob.buzz/
- LLM endpoint: https://phishdestroy.io/domain/www.videomemjob.buzz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.videomemjob.buzz/
Last updated: 2026-03-25