melontnsgroup[.]com[.]ng

Analysis of melontnsgroup.com.ng indicates a confirmed case of brand impersonation targeting Revolut, classified with an elevated risk level. The domain was registered on July 28, 2025, through Leads Globe, and resolved to IP 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the United States. No SSL certificate was detected, increasing the likelihood of unencrypted data transmission. The page title, 'Individual - Berlin,' suggests an attempt to mimic a localized Revolut service page, though the exact content and functionality remain unconfirmed due to the domain's offline status as of July 23, 2026.

Infrastructure analysis reveals the domain was flagged by one security blocklist and detected by PhishDestroy. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification. VirusTotal records show a single detection out of 95 vendors, though this alone does not provide conclusive evidence of widespread recognition. Nameservers (dns1-4.lytehosting.com) point to a hosting provider commonly associated with low-cost or abused infrastructure.

Defenders should treat this domain as malicious based on its registration details, hosting context, and detection by security vendors. The absence of SSL and the use of a recently registered domain further support its classification as a phishing resource. While the domain is currently offline, historical resolution to 163.61.188.5 and its association with known impersonation tactics warrant continued monitoring. No additional payloads, redirects, or associated malware samples have been confirmed at this time.