marriott-jobs[.]com

This domain, marriott-jobs.com, is flagged as an active credential theft operation impersonating the Marriott hotel brand. Analysis indicates the site mimics legitimate Marriott career portals to harvest login credentials, personal data, and employment information from job seekers. No crypto drainer or payment skimmer components were observed in initial scans, but the infrastructure aligns with credential harvesting campaigns targeting hospitality sector applicants.

Infrastructure analysis reveals the following technical indicators: the domain was registered on June 12, 2024, through NameSilo, LLC, and resolves to IP address 45.77.75.133. It is detected by 5 out of 95 security vendors on VirusTotal and appears on one security blocklist. The site uses a Let's Encrypt SSL certificate and LiteSpeed server technology. No Google Safe Browsing (GSB) flags were recorded at the time of assessment, but the domain creation date and hosting patterns suggest deliberate evasion of reputation-based filters.

The domain remains active and unremediated, posing an elevated risk to users. Response actions include submission to threat intelligence feeds and coordination with registrar abuse contacts for potential takedown. While the site is blocked by at least one security provider, the remaining risk stems from its continued accessibility via unprotected networks or direct navigation. Users are advised to verify career portals through official Marriott channels and avoid entering credentials on unverified job application sites.