jobs-omnicom[.]com

This domain, jobs-omnicom.com, poses a targeted credential theft threat by impersonating Omnicom Media, a legitimate global marketing and corporate communications holding company. Analysis indicates the site deploys a fraudulent careers portal under the page title 'Careers - Omnicom Media,' designed to harvest login credentials, personal data, and professional details from job applicants. The infrastructure mimics authentic corporate recruitment pages, increasing the likelihood of successful deception among targeted victims seeking employment opportunities. Evidence confirms the domain's malicious intent through multiple technical indicators. The domain was registered on June 12, 2026, via Name.com, Inc., with an anomalous future creation date suggesting potential domain spoofing or registry manipulation. It resolves to IP address 64.29.17.1 and is flagged by 8 out of 95 security vendors on VirusTotal, including detections for phishing and brand impersonation. The domain appears on two security blocklists, including PhishDestroy and OISD, and holds a trust score of 0/100. Infrastructure analysis reveals the use of Vercel for hosting, HSTS for enforced encryption, and Google Analytics for tracking user interactions, further indicating an attempt to emulate legitimate corporate web properties. Users who visited jobs-omnicom.com should immediately cease all interaction and assume credential compromise. Reset passwords for any accounts entered on the site, particularly corporate or professional platforms linked to job applications. Monitor financial and identity-related services for unauthorized activity, as stolen credentials may be used for follow-on attacks. Report the domain to internal security teams or relevant authorities for further investigation. Organizations should update blocklists to include this domain and its associated IP address to prevent access from corporate networks.