ncd[.]spotechsolutions[.]com[.]ng

This domain, www.ncd.spotechsolutions.com.ng, is flagged as a high-risk generic phishing site impersonating the National Cybercrime Database (NCD) system. Analysis indicates the infrastructure is designed to mimic an official cybercrime reporting or database portal, likely to harvest credentials, sensitive information, or deploy malware under the guise of a legitimate government or institutional service. No specific drainer kit signatures have been confirmed, but the domain’s page title, 'NCD System | National Cybercrime Database,' aligns with common social engineering tactics targeting individuals or organizations interacting with cybercrime reporting frameworks. Infrastructure analysis reveals the domain was registered on May 2, 2025, through the registrar Leads Globe. It resolves to the IP address 163.61.188.7 and currently holds a Gridinsoft trust score of 0/100. VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate is issued by Let’s Encrypt, a common tactic to lend superficial legitimacy to phishing sites. No Google Safe Browsing (GSB) listing is noted in the available data, though this does not preclude detection by other security layers. As of the latest assessment, the domain remains active and continues to pose a high risk to users. Response actions should include immediate blacklisting in enterprise security tools, DNS sinkholing, and public disclosure to relevant cybersecurity communities. The remaining risk stems from the domain’s plausible branding and the potential for targeted phishing campaigns against individuals or entities involved in cybercrime reporting or law enforcement collaborations. Organizations are advised to monitor for related infrastructure, enforce multi-factor authentication, and conduct user awareness training to mitigate exposure to this threat.