wakatrips[.]com[.]ng

The domain wakatrips.com.ng is flagged for brand impersonation, specifically targeting Facebook. This domain does not appear to be associated with any known crypto drainer kits, but its purpose is to deceive users into believing they are interacting with the legitimate Facebook platform, potentially leading to credential theft or other malicious activities.

Infrastructure analysis reveals that wakatrips.com.ng has a VirusTotal score of 1/95, indicating that one out of 95 security vendors flagged it as malicious. The domain is registered through CC-192-3-190-184-29 (ASN: 36352) and resolves to the IP address 192.3.190.189. It is currently listed on one security blocklist. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority used by both legitimate and malicious sites.

The current status of wakatrips.com.ng is offline, suggesting that the domain has been taken down. However, the potential for residual risk remains, as the infrastructure and registration details could be reused. Organizations and individuals are advised to remain vigilant and avoid interacting with this domain until it is confirmed to be safe. Security teams should monitor for any reactivation and consider implementing additional defensive measures, such as DNS blacklisting and user education on recognizing phishing attempts.