philip[.]borephilfarms[.]com[.]ng

This domain, philip.borephilfarms.com.ng, is flagged as a phishing endpoint targeting account takeover. Analysis on July 24, 2026, indicates the infrastructure is currently offline, displaying an 'Account Suspended' page title. The domain resolves to IP 51.91.227.6, hosted on OVH SAS (AS16276) in France, with no SSL certificate detected.

Security vendors have responded unevenly: 13 of 95 engines on VirusTotal detect the domain, and it appears on one security blocklist, with PhishDestroy actively blocking it. The lack of SSL and the suspended page suggest recent takedown action, though the exact timing and method of compromise remain unclear. Defenders should treat this as elevated risk due to the account takeover classification and prior detection by multiple vendors.

No brand-specific indicators are present in the available data, so the exact target (e.g., financial, email, or corporate credentials) cannot be confirmed. Review logs for connections to 51.91.227.6 and monitor for re-emergence under new subdomains or IPs. If internal users report contact with this domain, initiate credential reset and multi-factor authentication enforcement for affected accounts.