MALICIOUS — CRITICAL
marriott-opportunities[.]com
17 of 91 security engines flagged the domain; the latest stored check returned HTTP 200.
- VirusTotal
- 17/91
- Blocklists
- No stored match
- Disponibilità
- Ammantato · raggiungibile · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@name.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
marriott-opportunities.com — Ammantato · raggiungibile (HTTP 200). Simulazione del marchio: Marriott; Tipo di truffa: Impersonation. Riepilogo delle prove: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; URLScan malicious verdict; PhishStats feed match; cloaking observed; PhishDestroy score 100/100. Registrar: Name.com.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Digest
marriott-opportunities.com is classified critical with an evidence score of 100/100. 17 of 91 security engines flagged the domain. Registered 12 Jun 2026 via Name.com, Inc., hosted on 63.176.8.218 (Amazon.com, Inc., DE). The latest stored check on 9 Aug 2026 returned HTTP 200 and includes a capture. 1 outgoing abuse report is recorded, most recently on 12 Jun 2026.
Stored generated summary (templated)mistral · 25/06/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
This domain, marriott-opportunities.com, is identified as a fake job recruitment portal impersonating Marriott International. Analysis indicates it is actively engaged in employment scam phishing, luring victims with fraudulent job offers under the guise of legitimate corporate opportunities. The site is currently active and poses a high risk to individuals seeking employment. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Name.com, Inc., and resolves to the IP address 63.176.8.218. It is flagged by 18 of 95 security vendors on VirusTotal, with detections including credential harvesting and brand impersonation. The domain appears on three security blocklists, including PhishDestroy and PhishingArmy, and is blocked by multiple threat intelligence feeds. SSL certification is provided by DigiCert Inc, while backend technologies include Google Cloud, Nginx, and Google Cloud CDN, which may be leveraged to evade detection or distribute malicious payloads. Current status confirms the domain remains active, with no evidence of takedown or mitigation. Organizations and individuals are advised to block the domain and associated IP at the network level. End users should be alerted to the presence of this scam, particularly those in recruitment or hospitality sectors. Security teams are recommended to monitor for related domains using similar naming conventions and to verify job postings directly through Marriott International’s official careers portal.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 3 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Confidenza al 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com Confidenza al 100%Analisi di VirusTotal
Analisi della configurazione del sito
Dati e relazioni esterneIndependent lookups and source reports
PD-20260612-4C23B8 Recipient: abuse@name.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.