com-reserve-en[.]my

This domain, com-reserve-en.my, is actively engaged in credential theft operations targeting users through deceptive login portals. Analysis indicates the infrastructure is designed to harvest account credentials, likely for financial fraud or unauthorized access to sensitive services. The domain mimics legitimate reservation or authentication systems, increasing the likelihood of successful deception among users expecting login prompts for travel, banking, or e-commerce platforms. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on June 12, 2026, through Atak Domain Bilgi Teknolojileri AS, a registrar frequently associated with malicious activity. It resolves to the IP address 188.114.96.3 and is currently flagged by 14 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist and is actively blocked by enterprise-grade filtering systems. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security while the underlying infrastructure remains compromised. Users who have visited com-reserve-en.my or entered credentials on the site should immediately take remedial action. Change passwords for any accounts accessed through the domain, prioritizing financial, email, and work-related services. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unrecognized transactions or login attempts. If payment details were entered, contact financial institutions to flag potential fraud. The domain remains active, and users should avoid interacting with it or any associated links to prevent further exposure.