murnorex-biz-prenqorami-22t526sd[.]netlify[.]app

This domain has been assessed as a high-risk threat, specifically targeting users through credential theft tactics. PhishDestroy rates it as high risk because it employs deceptive techniques to harvest login credentials, often mimicking legitimate services. The domain remains active and poses an ongoing danger to anyone who might interact with it.

VirusTotal reports that 15 out of 95 security vendors flag this domain as malicious, indicating widespread recognition of its harmful nature. It resolves to IP address 35.157.26.135 and uses an SSL certificate from DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1, which may lend a false sense of legitimacy. The domain is registered through Netlify and appears on one security blocklist. Despite these indicators, the domain is still active and accessible.

To mitigate the risk of credential theft, users should avoid visiting this domain or clicking any links associated with it. Organizations should block the domain and the IP 35.157.26.135 at the network perimeter. If any credentials have been entered on this site, they must be changed immediately and affected accounts monitored for unauthorized access. PhishDestroy recommends reporting the domain to Netlify for takedown and educating users about phishing red flags such as unsolicited requests for login information.