cocacola-hr[.]com

This domain, cocacola-hr.com, poses as an official Coca-Cola careers portal to deceive job seekers into submitting personal information, including login credentials and sensitive employment details. The site mimics legitimate corporate branding to create a false sense of trust, increasing the likelihood of successful credential harvesting or identity theft. Analysis indicates this is a targeted phishing operation, likely designed to exploit individuals seeking employment opportunities with well-known brands. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 21 out of 95 security vendors on VirusTotal, with detections spanning phishing, fraud, and brand impersonation categories. It was registered on June 01, 2026, through Name.com, Inc., and hosted on the IP address 35.157.26.135. The site appears on six security blocklists, including PhishDestroy and CERT-PL, and uses technologies such as Netlify and Google Analytics to emulate legitimate corporate infrastructure. The creation date is notably in the future, a common tactic to evade initial scrutiny during registration. Individuals who visited cocacola-hr.com should take immediate action to mitigate potential risks. If any personal information was submitted, monitor financial accounts and credit reports for unauthorized activity. Reset passwords for any accounts where the same credentials may have been reused, prioritizing email and financial services. Report the incident to local cybersecurity authorities or consumer protection agencies. Organizations should update internal blocklists to prevent access to this domain and conduct awareness training to educate employees on recognizing brand impersonation tactics in phishing campaigns.