mnysiterev[.]info

PhishDestroy identifies mnysiterev.info as a live phishing domain currently under investigation for hosting a generic credential harvesting page designed to impersonate a financial institution. The domain utilizes a decoy login interface to trick victims into surrendering sensitive account credentials. No specific brand or drainer kit linkage has been confirmed at this stage, though the infrastructure suggests opportunistic theft targeting unaware users. The domain’s registration details and hosting configuration remain under forensic review to trace its origin.

This domain exhibits a 7/95 detection rate on VirusTotal as of the latest scan, indicating minimal signature-based detection coverage among security vendors. Registered through a privacy-protected registrar, mnysiterev.info resolves to IP address 188.114.97.3, hosted on infrastructure associated with Cloudflare. The domain secured a Google Trust Services SSL certificate on creation, which may be leveraged to enhance trust perception among potential victims. It is currently not flagged in Google Safe Browsing (GSB) and has not yet been listed on major threat intelligence blocklists. The domain’s creation date falls within the last 30 days, aligning with the active threat window.

As of today, mnysiterev.info remains active and operational, with no takedown or mitigation actions observed from hosting providers or registrars. PhishDestroy analysts continue to monitor the domain’s behavior, including real-time content analysis and certificate rotation checks. While the immediate risk is classified as under_investigation, users accessing this domain risk credential theft or malware delivery. Security teams are advised to block mnysiterev.info at the network perimeter and inspect DNS logs for evidence of internal exposure. Users should avoid entering login credentials and report any interaction with this domain to their security teams.