luvbeingworld[.]com[.]ng

The domain luvbeingworld.com.ng has been identified as a credential theft phishing site, likely targeting attendees of events or organizations based on its page title, 'Home 14 - OFFICERS NIGHT OUT.' Analysis indicates the domain is currently offline, but prior activity suggests it was designed to harvest login credentials or sensitive information under the guise of an event-related portal. No specific brand impersonation has been confirmed, though the context implies potential targeting of corporate or organizational groups. Infrastructure analysis reveals the domain resolved to IP address 192.3.190.186 and was registered through the registrar identified as CC-192-3-190-184-29, associated with ASN 36352. The domain appears on one security blocklist and has been flagged by 4 of 95 vendors on VirusTotal. The SSL certificate was issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains due to its accessibility. No creation date is available, but the use of a Nigerian country-code top-level domain (.com.ng) may indicate regional targeting or an attempt to appear localized. The domain is currently offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant, particularly those associated with event planning or corporate gatherings. Recommended actions include monitoring for re-activation of the domain, blocking the IP address 192.3.190.186 at the network level, and educating users about credential theft tactics targeting event-related communications. If credentials were previously entered on this site, affected parties should reset passwords and enable multi-factor authentication on all critical accounts.