reservecertitude[.]com

reservecertitude.com is currently hosting a live credential-phishing operation designed to steal usernames and passwords. The page mimics a legitimate login portal but sends whatever is typed straight to attackers, who then hijack the real account. Victims risk immediate take-over of email, banking, or corporate services once credentials are captured. Users who enter any information should change passwords everywhere immediately and enable two-factor authentication on every account that offers it. reservecertitude.com presents one of the lightest detection profiles observed: only 1 out of 95 top security vendors flagged the domain at time of assessment. The domain was registered on August 16, 2022 through NICENIC INTERNATIONAL GROUP CO., LIMITED and now resolves to host 216.106.179.55 protected by a Let’s Encrypt SSL certificate. Despite the low vendor count, behavior analysis and site structure clearly match known phishing kits; the SSL merely adds a false sense of security. If you visited or typed anything into reservecertitude.com, assume the credentials were compromised. Disconnect any active sessions on the affected service, reset the password using a different device, and enable multi-factor authentication before logging back in. Run a malware scan on the device used to access the page and consider rotating passwords on any other services where the same username or password pair was reused. Report the incident to your IT team or the service provider being impersonated.