mijndomein-renewal[.]honoringtheirmemory[.]com

This domain, mijndomein-renewal.honoringtheirmemory.com, is identified as a credential theft phishing operation targeting users of the mijndomein domain registration service. Analysis indicates the site was designed to harvest login credentials by mimicking legitimate renewal notifications, a common tactic in domain expiration scams. No evidence of crypto drainer kits or payment diversion was observed, but the infrastructure aligns with credential harvesting campaigns. Infrastructure analysis reveals the domain was registered on October 14, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to the IP address 65.181.125.151, hosted on AS36454 (WHG Hosting Services Ltd) in the United States. The domain lacks an SSL certificate, increasing susceptibility to interception. VirusTotal detection rates show 19 out of 95 security vendors flagging the domain as malicious. It appears on one security blocklist, and no Google Safe Browsing (GSB) detections were recorded at the time of analysis. The domain is currently offline, likely due to takedown actions or voluntary suspension. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the site prior to its deactivation. Organizations are advised to monitor for unauthorized access attempts using credentials potentially compromised via this campaign. Network defenders should block the domain and associated IP at perimeter controls and review logs for connections to 65.181.125.151. Users should be alerted to verify domain renewal notices through official channels and report suspicious communications.