cocacola-careerhub[.]com

This domain, cocacola-careerhub.com, is flagged as a high-risk credential theft operation impersonating Coca-Cola's official career portal. Analysis indicates the site mimics legitimate job application pages, likely harvesting login credentials, personal data, and employment documents from unsuspecting applicants. No crypto drainer kit signatures were observed, but the infrastructure aligns with credential harvesting campaigns targeting corporate recruitment pages. Infrastructure analysis reveals the domain was registered on May 3, 2026, through Name.com, Inc., an unusual future-dated creation that suggests registry manipulation or typo-squatting tactics. It resolves to IP address 91.195.240.94, a host with a history of malicious activity. VirusTotal detection shows 13 out of 95 security vendors flagging the domain, while Google Safe Browsing status remains unconfirmed. The SSL certificate is issued by DigiCert Inc, providing a false sense of legitimacy to visitors. No blocklist entries beyond VirusTotal were identified at the time of analysis. The domain remains active as of this report, with no takedown or sinkholing observed. Response actions should include immediate blacklisting in enterprise security controls, DNS filtering, and endpoint protection rules. Organizations should alert HR teams to warn job applicants about fake career portals, particularly those using unofficial domains. The remaining risk is high due to the domain's active status, brand impersonation, and targeted credential theft focus. Continuous monitoring is recommended to track potential shifts in hosting or additional malicious subdomains.