kanotimes[.]com[.]ng

This domain, kanotimes.com.ng, is currently active and has been classified as a generic phishing site with a high risk rating. The web server returns HTTP status code 200 and presents the page title "HOME 1 - Kano Times". The domain resolves to the IPv4 address 192.3.190.186, which is assigned to AS36352 operated by HostPapa and located in the United States. Registration was performed through HostAfrica, and the authoritative nameservers are dns1.webproserver.com and dns2.webproserver.com. The site uses a Let’s Encrypt R13 certificate, providing TLS encryption for client connections. Infrastructure analysis shows that the domain’s mail exchange (MX) record points to kanotimes.com.ng with priority 0, indicating that the same host is responsible for handling email traffic. VirusTotal scanning has resulted in 1 of 95 security vendors flagging the domain, and it appears on a single public blocklist where it is listed by PhishDestroy. These indicators collectively suggest that the domain is being leveraged for phishing operations, although the specific content and victim targeting have not been publicly disclosed beyond the page title. Defenders should incorporate the observed indicators into their detection and blocking strategies. Adding the IP address 192.3.190.186, the associated ASN AS36352, and the domain name kanotimes.com.ng to firewall and DNS filtering rules will mitigate exposure. Continuous monitoring of the domain’s DNS records, certificate renewal status, and any changes in the MX configuration is recommended, as alterations may indicate campaign evolution. Because the exact phishing payload and target brand are not yet identified, security teams should remain vigilant for related email or web‑based lure attempts that reference the "Kano Times" naming.