com-rebook[.]my

This domain is flagged as a high-risk credential harvesting phishing site targeting users through deceptive login portals. Analysis indicates the infrastructure is designed to mimic legitimate authentication pages, likely intended to capture sensitive user credentials such as usernames, passwords, and multi-factor authentication codes. The domain’s current status, despite displaying a 521 server error, suggests intermittent operational capability or a placeholder state awaiting reactivation for malicious campaigns. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Atak Domain Bilgi Teknolojileri AS, a registrar often associated with high-volume domain registrations for phishing operations. It resolves to the IP address 188.114.96.3 and is flagged by 14 out of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence platforms. Additionally, the domain appears on one security blocklist, further corroborating its malicious classification. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as phishing sites frequently leverage valid certificates to appear legitimate. Users who have visited com-rebook.my or interacted with any content hosted on this domain should immediately revoke any entered credentials, particularly for financial, email, or corporate accounts. Monitor linked accounts for unauthorized activity and enable multi-factor authentication where available. Network administrators should block the domain and its resolving IP at the perimeter to prevent further exposure. If credentials were submitted, initiate password resets across all platforms where the same or similar credentials may have been reused. Analysis of browser history or network logs may assist in identifying additional compromised sessions.