mail[.]nhanqua-vipff1[.]sbs

The domain mail.nhanqua-vipff1.sbs is currently under investigation with a risk level categorized as under_investigation due to its association with social engineering scams. This specific threat aims to deceive users into revealing sensitive information by impersonation or manipulation.

PhishDestroy's data shows mail.nhanqua-vipff1.sbs was created on July 07, 2025 and is registered through Atak Domain. It resolves to IP address 172.67.180.241. Despite having no detections on VirusTotal out of 95 scans, the domain appears on two security blocklists, OpenPhish and OISD. Google Safe Browsing flags it specifically for SOCIAL_ENGINEERING. The domain holds a valid SSL certificate issued by Google Trust Services, which may be used to add legitimacy to the scam.

To mitigate risks from social engineering scams associated with this domain, users should avoid interacting with unsolicited emails or messages purporting to come from mail.nhanqua-vipff1.sbs. Blocking the domain at network level and educating users about the tactics used in social engineering can reduce exposure. Continuous monitoring of blocklists and security feeds is advised to detect any escalation or new indicators related to this threat.