greendata[.]com[.]ng

PhishDestroy identifies greendata.com.ng as a fraudulent domain impersonating Nigeria’s GreenData services to harvest user payment credentials for airtime, data bundles, and electricity bills. The site is currently offline but remains under investigation for generic phishing tactics. This domain spoofs a legitimate Nigerian digital services provider by replicating its service offerings—including instant airtime recharge, data bundles, cable TV subscriptions (DStv, GOtv, Startimes), and electricity bill payments—without authorization.

This domain was flagged by 1 of 95 VirusTotal security vendors as of the latest scan, indicating it has not yet been widely recognized as malicious in public threat intelligence feeds. Registrar data shows the domain resolves to IP address 148.72.153.160 and is secured with a Let’s Encrypt SSL certificate, which is commonly exploited in phishing campaigns to appear legitimate. The domain appears to have been created recently and is not yet listed on major blocklists, though its operational status is currently offline. Trust scores remain neutral due to the lack of detections, but the absence of detections should not be interpreted as safety.

Given the domain’s known impersonation of GreenData services and its role in a suspected phishing campaign, users are strongly advised not to engage with greendata.com.ng or any related subdomains. Organizations should block the domain at the network level using DNS filtering and update firewall rules to include IP 148.72.153.160. Consumers who may have entered payment details on this site should immediately contact their bank to report potential fraud and monitor accounts for unauthorized transactions. PhishDestroy continues to monitor this domain and will update recommendations as new intelligence emerges.