jobcenter-nuernberg[.]de

The domain jobcenter-nuernberg.de is actively under investigation for its involvement in generic phishing schemes. Evidence suggests the site is attempting to imitate the official German Job Center (Jobcenter Nürnberg), with the intent to deceive users into divulging sensitive information. There are, as of this report, no clear indicators of specialized drainer kits or credential harvesting malware, but the impersonation of a trusted employment service increases the risk for potential victims.

Technical analysis yields several indicators of compromise. The latest VirusTotal analysis reports 0 out of 95 engines detect any malicious activity, indicating the site is not yet flagged by mainstream security vendors. DNS resolution shows the domain points to IP address 92.205.214.15. No information is available regarding the domain’s original creation date or registrar. At this time, there are no records of this domain being listed on common blocklists or Google Safe Browsing databases, further supporting its current low detection rate.

The domain remains operational and is not identified by security databases at this time, increasing its potential effectiveness against unsuspecting users. Immediate actions recommended include monitoring for content changes, reporting to relevant authorities, and alerting potential targets—specifically those seeking employment services in Germany. Until the domain is appropriately flagged or taken down, the risk to users remains high, and caution should be exercised when receiving unsolicited emails or messages referencing this domain.