mpgartenshop[.]com

This domain, mpgartenshop.com, is actively flagged as a generic phishing threat targeting online garden supply and home improvement consumers. Analysis indicates the domain is currently active and designed to impersonate legitimate retail platforms, likely harvesting payment credentials or personal data under false pretenses. The infrastructure exhibits multiple indicators of malicious intent, consistent with large-scale credential theft operations. Infrastructure analysis reveals the domain was registered on June 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk registrations. It resolves to the IP address 188.114.97.3, which has been linked to other suspicious domains in recent threat intelligence feeds. The domain appears on one security blocklist and is flagged by 8 of 95 vendors on VirusTotal, including detections for phishing and fraudulent content. Despite its recent creation date, the domain has already established an SSL certificate issued by Google Trust Services, a tactic commonly employed to lend false legitimacy to phishing sites. Current status remains active, with no evidence of takedown or remediation at the time of assessment. The risk level is classified as high due to the domain's operational status, detection volume, and association with known malicious infrastructure. Organizations and end users are advised to block all traffic to and from 188.114.97.3 and mpgartenshop.com at the network perimeter. Security teams should monitor for connections to this domain in logs and investigate any prior interactions. Users who may have visited the site should reset credentials for any accounts accessed during the suspected exposure window and enable multi-factor authentication where available.