research[.]name[.]ng

This domain, www.research.name.ng, is currently active and classified as a high‑risk generic phishing site. DNS resolution points to the IPv4 address 163.61.188.7, which resolves to a server located in the United States and associated with the MIT network segment. An HTTP GET returns status code 200 and the page title “Account Suspended”, indicating that the underlying web content is either a placeholder or a takedown notice rather than the original malicious payload. The site was registered through the Reservedomain registrar (NAR) and uses a Let’s Encrypt certificate issued under the YR2 policy, confirming that TLS is correctly configured but offering no additional trust. Independent analysis on VirusTotal shows that three of ninety‑one scanners flagged the domain, and it is listed on one external blocklist; the domain is also blocked by the PhishDestroy mitigation service. These indicators collectively suggest that the domain is being used to host phishing infrastructure, although the exact lure or target brand has not been disclosed. Defenders should continue to block the domain at firewall and DNS filtering layers, monitor outbound connections to the associated IP, and consider adding the address to threat‑intel feeds. Additional investigation is needed to determine whether the site serves credential‑harvesting forms or redirects to secondary payload hosts, as the current page title provides no visibility into the malicious payload.