ahi[.]org[.]ng[.]smartrecord[.]net

Analysis of the domain ahi.org.ng.smartrecord.net indicates an active high‑risk brand‑impersonation campaign linked to a cryptocurrency scam. The domain was registered on 21 February 2026 through GMO Internet Group, Inc. d/b/a Onamae.com and is hosted on IP 163.61.188.2, which resolves to an Autonomous System (AS153568) identified as NEW DHAKA HARDWARE located in the United States. Authoritative nameservers listed are ns5.afternic.com, ns6.afternic.com and a verification‑prefixed server, suggesting use of a commercial registrar service. The site serves an HTTP 200 response and presents the page title “Ajwad Humanitarian Initiative,” but no further content has been publicly disclosed. VirusTotal records show that one of ninety‑three scanning engines flagged the domain, and the SSL certificate is rated R13. Independent security tools assign a Gridinsoft trust score of 0 / 100, and the domain appears on a single external blocklist, with PhishDestroy already enforcing a block. The combination of a low trust score, a flagged certificate, and the association with a cryptocurrency‑drain scheme warrants immediate remediation. Defenders should add the domain and its resolving IP to deny‑list controls, monitor DNS queries for the listed nameservers, and treat any traffic as malicious while further investigation continues.