illuminatiq[.]com

The domain illuminatiq.com is currently listed as offline but retains a persistent threat profile that aligns with generic phishing campaigns. The site was registered on February 22, 2026 through NiceNIC International Group Co., Limited and subsequently pointed to Cloudflare’s network (AS13335) with the A record 104.21.76.97, a US‑based IP address. Nameserver delegation to adi.ns.cloudflare.com and lakas.ns.cloudflare.com confirms the use of Cloudflare’s DNS infrastructure, a common tactic for rapid re‑hosting and mitigation evasion. No TLS certificate is associated with the domain, indicating that the site does not support encrypted HTTPS connections, which reduces credential‑harvesting confidence but also reveals a lack of legitimate security practices.

The page title retrieved from the live snapshot—"Hire Me — SEO Expert Looking for Work"—does not directly reference a targeted brand, yet the phrasing is consistent with lure content used to entice victims into providing personal or financial information. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy feed, reinforcing the assessment of malicious intent. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing independent vendor corroboration of suspicious behavior.

Defenders should continue to enforce blocklist policies that include illuminatiq.com, monitor its associated IP address for any re‑activation, and consider expanding detection rules to capture related Cloudflare‑hosted infrastructure. Because the site lacks an SSL certificate, network‑level inspection can be more readily applied without dealing with encrypted payloads. Attribution remains limited to the registrar and hosting details; no additional intelligence such as OTX tags or Safe Browsing classifications was observed.