levis-careers[.]com

This domain, levis-careers.com, is actively engaged in credential phishing targeting Levi Strauss & Co. employees and job applicants. Analysis confirms the domain is currently operational, presenting itself as a legitimate careers portal under the title 'Job Opportunities | Levi's Careers.' The threat type is classified as generic_phishing with a high-risk designation, specifically designed to harvest login credentials and personal information from unsuspecting victims. Infrastructure analysis reveals the domain resolves to the IP address 63.176.8.218 and was registered through Name.com, Inc. on June 27, 2026. Detection metrics indicate the domain has been flagged by 5 of 95 security vendors on VirusTotal, while also appearing on one security blocklist. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy. Google Safe Browsing has categorized the domain under 'SOCIAL_ENGINEERING,' further corroborating its malicious intent. At present, the domain remains active and unmitigated. Organizations and individuals are advised to block the domain and its associated IP address at the network perimeter. End-users should be alerted to avoid interacting with any communications or job postings linked to levis-careers.com. Security teams are recommended to monitor for credential reuse attempts stemming from this campaign and to implement multi-factor authentication as a compensatory control.