robinhood-chain-testnet[.]free[.]nf

The domain robinhood-chain-testnet.free.nf is currently flagged as an active phishing infrastructure. DNS resolution returns the IPv4 address 185.27.134.223, indicating that the host is reachable on the public internet. The domain has been listed on two independent security blocklists, and both PhishDestroy and ScamSniffer have issued explicit blocks against it, confirming that multiple detection engines have observed malicious behavior associated with the host.

The nameserver query returned NS_NOT_FOUND, suggesting that authoritative name server information could not be retrieved, which may be a deliberate attempt to obscure control of the domain or a misconfiguration that hinders further DNS analysis. No additional metadata such as SSL certificate details, HTTP response codes, or page titles have been disclosed, leaving the surface‑level characteristics of the hosted content unknown. Consequently, investigators cannot confirm the exact phishing lure or the targeted brand, but the presence on reputable blocklists and the active status imply ongoing exploitation.

Defenders should add 185.27.134.223 to network‑level deny lists, enforce DNS filtering for robinhood-chain-testnet.free.nf, and monitor for any outbound connections to the IP. Continuous re‑evaluation is advised, as future scans may reveal the payload, landing page structure, or additional infrastructure components that could refine remediation actions.