helloenergy[.]ng

Analysis of the domain helloenergy.ng indicates it is being used in a high‑risk generic phishing campaign. The domain is registered through GO54 Limited (formerly Whogohost Limited) and was created on 18 June 2019. It is currently active and resolves to the IPv4 address 192.249.126.200, with authoritative nameservers ns1.inmotionhosting.com and ns2.inmotionhosting.com. VirusTotal scans have flagged the domain by 10 of 91 security vendors, providing independent confirmation of malicious intent. The available intelligence does not include a content scrape, victim reports, or details about the specific phishing lure, leaving the exact tactics and targeted brands uncertain. Defenders should treat helloenergy.ng as hostile infrastructure: block DNS resolution and any outbound connections to the IP address, add the domain to URL filtering and email gateway deny lists, and monitor for any related command‑and‑control traffic. Continuous re‑assessment is advised, as future changes to the hosting environment or additional malware signatures could alter the threat posture.