yoursecurityupdate[.]com

Analysis of the domain yoursecurityupdate.com, created on February 21, 2026 and registered through Tucows Domains Inc., indicates an active credential phishing operation. The site resolves to IP 143.244.166.126, hosted by DigitalOcean, LLC (AS14061) in the United States. A Let's Encrypt/E8 certificate secures the HTTPS endpoint, and the HTTP response is a 302 redirect, a pattern commonly used to obscure the final landing page. The infrastructure runs WordPress on a Plesk stack with MySQL, PHP, UIKit, Yoast SEO, Nginx, and reCAPTCHA components, suggesting a generic content management system rather than a specialized phishing kit.

Nameserver records point to ns180.rapidenet.ca and ns181.rapidenet.ca, and the domain publishes an MX record (priority 10) for mail.yoursecurityupdate.com, enabling email receipt for potential victim communications. The page title "Hameçonnage - Sensibilisation à la Cybersécurité en Entreprise | Damoclès" directly references phishing, confirming the intended deceptive purpose. Detection metrics show the domain appears on three security blocklists and is currently blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX lists the domain in one threat intelligence pulse, and VirusTotal reports six of ninety-three scanners flagging it as malicious.

Independent assessment by Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high-risk classification. While the exact phishing landing page content has not been publicly disclosed, the convergence of blocklist listings, multiple vendor detections, low trust rating, and the explicit page title provides strong evidence of credential harvesting activity. Defenders should add the domain and its IP address to network deny lists, monitor DNS queries for the associated nameservers, and enforce email filtering for the listed MX host. Continuous re‑scanning with multi‑vendor services is advised to capture any evolution of the payload or hosting changes.