rullenaglobal[.]com[.]ng

The domain rullenaglobal.com.ng was registered on February 21, 2026 and is presently classified as a generic_phishing campaign with a high risk rating. The site remains active, serving HTTP 200 responses, and its page title is reported as "Rullena Global Resources Ltd – Quality". This observation aligns with the initial intelligence that the domain is being used for fraudulent purposes.

Infrastructure analysis shows that the domain resolves to the IPv4 address 163.61.188.5, which belongs to AS153568 NEW DHAKA HARDWARE and is geolocated in the United States. Registration was performed through the registrar Leads Globe, and the authoritative nameservers are dns3.lytehosting.com, dns2.lytehosting.com, dns1.lytehosting.com, and dns4.l (truncated). The TLS certificate is issued by Let\'s Encrypt, version R13, indicating the use of a free, automated certificate service, and the server continues to present a valid certificate chain.

Detection data indicates that the domain is blocked by the PhishDestroy service and appears on a single security blocklist. VirusTotal analysis returned a single positive detection out of 95 scanned security vendors, and the Gridinsoft trust score is 0 out of 100, reflecting a strong confidence in the malicious nature of the site. These signals collectively corroborate the high‑risk classification and the active status of the phishing infrastructure.

Defenders should prioritize immediate blocking of rullenaglobal.com.ng at perimeter defenses, including firewalls, DNS filtering, and web proxy solutions. Continuous monitoring of the associated IP address 163.61.188.5 is advised to detect any lateral movement or reuse in subsequent campaigns. Analysts should also consider sharing the indicators of compromise with collaborative threat‑intelligence platforms to aid broader community mitigation efforts.