# mail.nhanqua-vipff1.sbs — SUSPICIOUS

> mail.nhanqua-vipff1.sbs is linked to social engineering scams, flagged by Google Safe Browsing. Domain created July 2025. Check the full report.

## Summary
The domain mail.nhanqua-vipff1.sbs is currently under investigation with a risk level categorized as under_investigation due to its association with social engineering scams. This specific threat aims to deceive users into revealing sensitive information by impersonation or manipulation.

PhishDestroy's data shows mail.nhanqua-vipff1.sbs was created on July 07, 2025 and is registered through Atak Domain. It resolves to IP address 172.67.180.241. Despite having no detections on VirusTotal out of 95 scans, the domain appears on two security blocklists, OpenPhish and OISD. Google Safe Browsing flags it specifically for SOCIAL_ENGINEERING. The domain holds a valid SSL certificate issued by Google Trust Services, which may be used to add legitimacy to the scam.

To mitigate risks from social engineering scams associated with this domain, users should avoid interacting with unsolicited emails or messages purporting to come from mail.nhanqua-vipff1.sbs. Blocking the domain at network level and educating users about the tactics used in social engineering can reduce exposure. Continuous monitoring of blocklists and security feeds is advised to detect any escalation or new indicators related to this threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-07 23:08:42
- Registrar: Atak Domain
- IP: 172.67.180.241

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["OpenPhish", "OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/mail.nhanqua-vipff1.sbs
- PhishDestroy: https://phishdestroy.io/domain/mail.nhanqua-vipff1.sbs/
- LLM endpoint: https://phishdestroy.io/domain/mail.nhanqua-vipff1.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mail.nhanqua-vipff1.sbs/
Last updated: 2026-04-04