google-jobs-verify[.]esk-sic[.]de

PhishDestroy identifies google-jobs-verify.esk-sic.de as an active brand impersonation scam targeting Google. The domain exploits the targeted brand’s reputation to deceive users into divulging sensitive information or downloading malicious payloads. This site is currently under investigation but remains accessible and operational. Users encountering this domain should treat it as high-risk and avoid any interaction.

This domain (google-jobs-verify.esk-sic.de) was flagged by 3 of 95 VirusTotal vendors as of the latest scan, indicating it evades detection by most antivirus engines. The domain resolves to IP address 67.205.154.99 and operates under a Let's Encrypt SSL certificate, adding a false layer of legitimacy. Registered through a privacy-protected registrar, its exact creation date remains unverified, but active hosting suggests recent deployment. Blocklist inclusion and trust scores are pending further analysis, reinforcing the need for heightened vigilance.

The current status of google-jobs-verify.esk-sic.de is active and unresolved. Concrete recommendations include blocking the domain and IP at the network perimeter, updating threat intelligence feeds, and warning end-users about the associated risks. Organizations should conduct further behavioral analysis to assess payload delivery mechanisms and potential lateral movement risks. Immediate containment is advised to prevent credential theft or financial fraud.