promas[.]com[.]ng

Analysis of promas.com.ng indicates that the domain is currently active and classified as a high‑risk generic phishing site. The domain was registered on 03 February 2025 through HostAfrica and uses the authoritative nameservers dns1.webproserver.com and dns2.webproserver.com. DNS resolution points to the IPv4 address 192.3.190.186, which belongs to AS36352 (HostPapa) and is geolocated in the United States. The site presents a valid HTTPS certificate issued by Let’s Encrypt (R12) and returns HTTP 200 responses, suggesting a functional web server. The page title “Project Financial Management” is the only content identifier available; no further page content has been examined. Infrastructure reputation is poor: Gridinsoft assigns a trust score of 0 / 100, and three of ninety‑five VirusTotal scanners have flagged the domain. It is listed on one external blocklist and has been blocked by PhishDestroy. MX records exist with priority 0 pointing to promas.com.ng, which may be used for credential harvesting. Given the combination of recent registration, low trust scores, multiple security vendor detections, and active blocklist entries, defenders should treat traffic to this domain as malicious, enforce network‑level blocks on the domain and its resolved IP, and monitor for any related email activity. Further investigation of the hosted content is recommended to confirm the phishing payload.