indeed-jobs[.]net

PhishDestroy identifies indeed-jobs.net as a credential theft phishing domain designed to impersonate legitimate job platforms. The site mimics Indeed's branding to trick users into submitting sensitive information such as email addresses, passwords, and even Social Security numbers under the guise of job applications or account verification. This specific threat exploits the trust users place in employment services, making it particularly dangerous during job searches.

Technical analysis reveals strong evidence of malicious intent. VirusTotal data shows 13 out of 95 security vendors flagging this domain, indicating widespread detection. The domain is registered through NAMECHEAP INC, a common registrar for phishing operations, and uses a Let's Encrypt SSL certificate (E8) to appear legitimate. The domain resolves to IP 172.67.171.101, and while the site is currently offline, its creation date and blocklist presence (included in the 13 vendor flags) confirm its active use for phishing campaigns.

Users who have visited indeed-jobs.net and entered any information should immediately change passwords on any accounts that share those credentials, enable two-factor authentication, and monitor financial accounts for suspicious activity. It is also recommended to run a full antivirus scan and report the incident to relevant authorities. As always, verify job postings directly on official company websites and never submit personal data through unsolicited links.