bfmonrl[.]online

Analysis of the domain bfmonrl.online indicates it is associated with phishing activity targeting Bank Of Montreal customers. The domain was registered on July 9, 2026, through a registrar based in Lithuania, with hosting infrastructure located in the Netherlands under KnownSRV Ltd. The site resolves to the IP address 185.66.140.182 and currently returns an HTTP 200 status, suggesting it is operational. The page title explicitly displays 'Bank Of Montreal,' which aligns with the observed phishing classification. Infrastructure details reveal the domain uses Let's Encrypt SSL certificates, a common choice for both legitimate and malicious sites. MX records point to the domain itself, which may facilitate email-based phishing attempts. The domain appears on at least one security blocklist, though no detections are currently recorded by major scanning engines. This absence does not confirm safety, as newly registered domains often evade initial detection. Defenders should treat this domain as active phishing infrastructure. The combination of recent registration, hosting in a high-risk provider region, and explicit branding in the page title supports this assessment. Further monitoring is recommended to track any shifts in detection status or additional blocklist inclusions. Organizations should consider preemptive blocking of this domain and its associated IP address to mitigate potential credential theft or financial fraud targeting Bank Of Montreal customers.