dirtyjenny[.]xyz

The domain dirtyjenny.xyz was registered on May 25, 2026 through Go Daddy, LLC and is currently active. It is classified as a generic_phishing site with a high risk rating and a unique seed of 7e18b8. The site returns HTTP 200 responses and presents the page title “$HIV — Dirty Jenny · Highly Infectious Value”, suggesting an attempt to lure victims by referencing a health‑related term.

Infrastructure analysis shows that the domain resolves to the IPv4 address 216.150.1.1 and is delegated to the nameservers ns67.domaincontrol.com and ns68.domaincontrol.com, both typical of Go Daddy’s DNS service. The domain received a Gridinsoft trust score of 0 out of 100, indicating a lack of reputation. It is listed on three security blocklists and has been flagged by the PhishDestroy, MetaMask, and SEAL filtering platforms.

Observations from the live site confirm that the page loads successfully (HTTP 200) and the content aligns with the phishing narrative implied by the title. No detections were reported on VirusTotal at the time of analysis (0/95), but the absence of detections does not imply benign intent, especially given the active blocklist entries and the low trust score. The presence of the domain on multiple blocklists reinforces the likelihood that it is being used for credential harvesting or malicious redirects.

Given the high‑risk classification, defenders should proactively block DNS resolution for dirtyjenny.xyz and any associated IP address (216.150.1.1) at perimeter and endpoint layers. Network traffic to the domain should be monitored for anomalous patterns, and any compromised credentials should be rotated immediately. Continuous re‑evaluation is advised, as the site’s content and targeting may evolve, and additional intelligence may reveal the exact brand or service being spoofed.