mmtfi[.]com

The domain mmtfi.com was registered on 25 October 2025 through Tucows Domains Inc. It is currently classified as a generic_phishing threat with a high risk rating and an active status. The site presents a single page title identical to the domain name, and no SSL certificate is associated with the host, indicating unencrypted HTTP delivery. Infrastructure analysis shows the domain resolves to IP address 37.221.66.97, which belongs to AS48753 AVA HOST SRL located in Maryland, United States. The domain uses Cloudflare’s DNS services, specifically magnolia.ns.cloudflare.com and mitch.ns.cloudflare.com, providing an additional layer of anonymity. An HTTP request to the host returns a 403 Forbidden response, which may be intentional to obscure content while still allowing automated scanners to flag the endpoint. Reputation services corroborate the malicious nature of the host. VirusTotal records four out of ninety‑five security vendors flagging the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting extreme suspicion. The domain appears on one public blocklist and is specifically listed by PhishDestroy as a confirmed phishing site. No additional content analysis or page capture is available, leaving the exact phishing payload or targeted brand undefined. Given the high‑risk classification, defenders should block DNS resolution for mmtfi.com at the network perimeter and incorporate the domain into endpoint allow‑list exclusions. Continuous monitoring of the associated IP range and the Cloudflare name servers is advised to detect potential re‑use of the same infrastructure for new campaigns. Threat intel feeds should be updated with the current indicators of compromise, and any observed traffic to the domain should be logged for forensic correlation.