pharosnetwork-tge[.]com

Analysis of the domain pharosnetwork-tge.com shows that it is currently active and was registered on April 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 188.114.97.3 and is served by Cloudflare nameservers luciane.ns.cloudflare.com and zac.ns.cloudflare.com. Threat intelligence indicates that the domain is being used for generic phishing operations, as reflected by its classification in the supplied data. Eight of ninety‑one security vendors on VirusTotal have flagged the domain, and it appears on three independent security blocklists.

Additional protective services, including PhishDestroy, MetaMask, and SEAL, have already blocked the domain, suggesting that multiple layers of defense have identified it as malicious. The available evidence does not include a page title, SSL certificate details, HTTP response codes, or any observed landing‑page content, leaving the exact phishing payload and targeted brand unspecified. Consequently, the precise tactics, techniques, and procedures (TTPs) employed by the actors remain uncertain.

Defenders should continue to enforce blocklist entries for pharosnetwork-tge.com across network perimeter and endpoint controls, monitor DNS queries for the associated IP address, and consider adding the domain to custom deny lists in web filtering solutions. Ongoing surveillance of the hosting infrastructure and any changes to the nameserver configuration is recommended, as shifts could indicate attempts to evade detection. Organizations should also verify that any user‑facing applications that interact with external URLs are configured to reject connections to this domain, and incident response teams should be prepared to investigate any credential submissions that may be directed to it.