ablevtu[.]ng

The domain ablevtu.ng has been identified as a generic phishing site with an elevated risk level. The domain does not appear to be associated with a specific brand or drainer kit, making it a generic but potent threat vector designed to deceive users and potentially steal sensitive information.

Technical indicators for ablevtu.ng reveal a VirusTotal (VT) score of 1/95, indicating that one out of 95 security vendors flagged this domain as malicious. The domain is registered through TRUEHOST CLOUD and resolves to the IP address 66.29.137.93. It was created on February 21, 2026, and currently holds an SSL certificate issued by Sectigo Limited, specifically the Sectigo Public Server Authentication CA DV R36. The domain appears on one security blocklist, further corroborating its malicious nature.

The domain ablevtu.ng is currently offline, which may indicate that it has been taken down due to security concerns or that the campaign has concluded. Despite its offline status, the infrastructure and historical data suggest that it posed a significant risk while active. Users should exercise caution and avoid visiting the domain if it becomes active again. Security teams are advised to monitor the domain and related IP addresses for any signs of reactivation and to update their blocklists and security measures accordingly.