# northhighland-work.com — SUSPICIOUS

> northhighland-work.com is linked to low-risk phishing. Avoid sharing personal info and report suspicious activity immediately.

## Summary
PhishDestroy identifies northhighland-work.com as an active low-risk phishing domain targeting generic victims. The campaign aims to harvest credentials or personal data through deceptive means.

The domain was registered on February 7, 2026, via Dynadot Inc and resolves to IP 172.67.144.77. VirusTotal flags only one out of 95 security engines, indicating minimal detection but warranting caution. The infrastructure suggests a newly created domain used for short-term phishing operations.

Currently active, users should avoid interacting with this domain and refrain from submitting any sensitive information. Continuous monitoring and blocking at network levels are recommended to mitigate potential threats associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: North Highland

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Dynadot Inc
- IP: 172.67.144.77
- Nameservers: donovan.ns.cloudflare.com grace.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://i.ibb.co/h1xzM0rV/f420ffc63b5c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8c6a6a2a-2a16-48a4-9a60-514822644d9a
- PhishDestroy: https://phishdestroy.io/domain/northhighland-work.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/northhighland-work.com/
Last updated: 2026-03-14