jobifyru[.]com

The domain jobifyru.com was observed on July 12, 2026 and classified as a high‑risk generic phishing site. The site returns HTTP 200 and presents a page titled “Работа для женщин в Москве — клининг вахтой 30/30 и 60/30”, which mimics legitimate employment listings to lure victims. The domain was created on April 13, 2026 and remains active.

Technical infrastructure shows the domain is served over TLS using a Let’s Encrypt certificate (E8). DNS resolution points to IP 91.229.239.120, hosted in Germany by Alexhost SRL. Registration details list Fewmoretaps OU d/b/a Trustname.com as the registrar. No additional IPs or CNAME records were observed.

Threat intelligence indicates the domain appears on a single security blocklist and was blocked by PhishDestroy. AlienVault OTX contains eight pulses referencing the same indicator, suggesting repeated sightings across multiple feeds. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports one of ninety‑five security vendors flagging the domain as malicious, reinforcing the high‑risk assessment.

Defenders should block network traffic to 91.229.239.120 and add jobifyru.com to DNS sinkhole lists. Email filtering rules should be updated to detect the Russian‑language subject line and the employment‑related lure used in the page title. Continuous monitoring of OTX and other threat‑share platforms for new pulses is advised, and any internal credentials submitted to the site should be considered compromised and rotated immediately.