receita[.]vip

Analysis indicates that the domain receita.vip is an active phishing site as of July 19, 2026. The domain is registered through CommuniGal Communication Ltd. and uses nameservers ns15.abovedomains.com and ns16.abovedomains.com. It resolves to the IP address 103.224.212.210, hosted by Trellian Pty. Limited in Australia. The site presents an HTTP 200 status, suggesting it is operational, and its SSL certificate is issued by Let's Encrypt. The page title, receita.vip, does not provide conclusive evidence of the targeted brand, though the domain name may imply an attempt to impersonate a tax or revenue authority. Infrastructure review shows the domain appears on one security blocklist and is blocked by PhishDestroy. One of 91 security vendors on VirusTotal flags the domain, though this single detection does not alone confirm malicious intent. No additional details regarding the phishing kit, targeted brand, or specific scam mechanics are available at this time. Defenders should treat this domain as high-risk due to its active status, blocklist presence, and association with known phishing infrastructure. Immediate blocking at the DNS or network level is recommended, and further investigation into user interactions with this domain is advised to assess potential compromise.