zeeloxtech[.]com[.]ng

On 2026-08-06, zeeloxtech.com.ng was observed as an active generic phishing infrastructure. The domain was registered on 2026-05-03 through TRUEHOST CLOUD and is hosted on the IP address 161.97.163.141. Authoritative DNS records list ns1.hostboldy.com and ns2.hostboldy.com as the sole name servers. VirusTotal has recorded 91 vendor scans of the domain; at the time of analysis no vendor raised a detection, indicating that the payload or page content has not yet been identified by the scanning engines. Independent threat‑blocking services have taken action: PhishDestroy currently blocks the domain, and it appears on one additional security blocklist, reinforcing the assessment that the domain is being used for malicious purposes.

The risk level is marked as “under investigation” and the operational status is listed as active. The available intelligence does not include details on SSL certificates, HTTP response codes, page titles, or any observed malicious payloads, so the exact phishing vector and targeted brand remain unknown. Absence of such data limits the ability to attribute the campaign to a specific kit or to confirm the exact content served to victims. Nevertheless, the combination of recent registration, dedicated hosting under hostboldy.com name servers, and inclusion on blocklists suggests intentional use for phishing attempts.

Defenders should treat zeeloxtech.com.ng as a hostile domain. Recommendations include adding the domain to outbound and inbound firewall deny lists, ensuring web filtering solutions block access, and monitoring DNS queries for the associated IP and name servers. Incident response teams should also query the IP 161.97.163.141 for any active connections and consider isolating internal hosts that have recently resolved the domain. Continuous re‑scanning on platforms such as VirusTotal is advised to capture any future payloads that may become detectable.