mvp-24[.]com

This domain, mvp-24.com, is currently flagged as an active credential-phishing endpoint targeting Russian-speaking users. Analysis indicates the site presents a deceptive CAPTCHA prompt with the page title "Вы не робот?" (Are you not a robot?), a common social-engineering tactic to bypass user suspicion and encourage interaction. The domain was registered on April 14, 2026, through a privacy service associated with Cloudflare, Inc., and resolves to a single IP address, 93.113.175.145, hosted on AS25369 (Hydra Communications Ltd) in the United Kingdom. A 301 HTTP redirect is in place, which may indicate an attempt to funnel victims to a secondary malicious payload or phishing landing page. Infrastructure analysis reveals the use of a WE1 SSL certificate, a low-assurance certificate type often exploited in phishing campaigns due to its minimal validation requirements. While only two out of ninety-five security vendors on VirusTotal currently flag this domain, it appears on one blocklist maintained by an independent threat intelligence provider. The discrepancy between vendor detections and blocklist presence suggests either a targeted campaign or a newly deployed phishing kit that has not yet achieved broader detection coverage. Defenders should treat this domain as high-risk based on its active status, CAPTCHA spoofing technique, and infrastructure characteristics. The Russian-language page title and minimal detection footprint may indicate a campaign tailored to specific regions or organizations. Network-level blocking of the IP 93.113.175.145 and domain mvp-24.com is recommended, along with monitoring for related indicators such as SSL certificate fingerprints and redirect chains. Further investigation into the final landing page and associated infrastructure is advised to determine the full scope of the threat.