mnrevref[.]info

This domain, mnrevref.info, is currently flagged as an active credential harvesting phishing site targeting users through deceptive application-themed pages. Analysis indicates the domain is designed to mimic legitimate login portals, likely to capture sensitive authentication details such as usernames, passwords, or multi-factor authentication codes. The page title, 'Application placeholder,' suggests an attempt to simulate a generic or branded application interface, though no specific brand impersonation has been confirmed at this time. The domain remains operational and poses an elevated risk to users who may inadvertently interact with it. Infrastructure analysis reveals the domain was registered on June 15, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious activity. It resolves to the IP address 188.114.96.3, which may host additional phishing or malicious content. Security vendor detection is notable, with 6 of 95 VirusTotal engines flagging the domain as malicious. The domain has also been added to one security blocklist, and its trust score, as assessed by Gridinsoft, is 0 out of 100, indicating a complete lack of legitimacy. The combination of recent registration, low detection thresholds, and active resolution suggests a deliberate effort to evade detection while maintaining operational persistence. Current status confirms the domain remains active and unresolved by the registrar or hosting provider. Organizations and users are advised to implement immediate blocking of mnrevref.info at the DNS and network perimeter levels. Endpoint protection solutions should be updated to include this domain in phishing and malicious URL detection rules. Security teams are encouraged to monitor for connections to 188.114.96.3 and investigate any internal systems that have interacted with the domain or its associated IP. User awareness training should emphasize the risks of interacting with unsolicited application-themed pages, particularly those lacking verifiable branding or SSL certificates from trusted authorities.