feezylogs[.]dat[.]ng

The domain feezylogs.dat.ng is confirmed to host a credential theft operation, designed to harvest user login credentials through deceptive login portals. Analysis indicates the site is currently offline, though prior activity suggests it was actively targeting unsuspecting victims with fake authentication interfaces. Infrastructure analysis reveals the domain was registered through AfeesHost Ltd on April 08, 2026, and resolved to the IP address 148.72.153.160. Security assessments flagged the domain on 1 blocklist, while 6 of 95 VirusTotal vendors detected malicious activity associated with it. The domain holds a Gridinsoft trust score of 0/100, further corroborating its malicious nature. A Let's Encrypt SSL certificate was present, which may have been used to lend a false sense of legitimacy to the phishing pages. The domain has since been taken offline, likely due to detection and enforcement actions. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should review logs for connections to 148.72.153.160 or feezylogs.dat.ng, particularly from April 2026 onward, to identify potential credential exposure. End-users should be reminded to verify domain authenticity before entering login credentials and to report any suspicious login prompts encountered during that period.