ophthalmology[.]com[.]ng

The domain ophthalmology.com.ng was registered on March 11 2026 through Registeram.com Limited and remains active with an HTTP 200 response. Its page title matches the domain name exactly. The site is classified as generic phishing and carries a Gridinsoft trust score of 0 out of 100. It appears on one security blocklist and is flagged by four out of 95 vendors on VirusTotal. The domain is also blocked by PhishDestroy. These indicators establish a clear detection footprint despite the relatively recent registration date of four months prior to the July 12 2026 report. Infrastructure analysis reveals that the domain resolves to IP address 192.142.10.5 located in the Netherlands under AS214036. The nameservers consist of four hosts under ultahost.com while the sole MX record points back to the domain itself with priority zero. An SSL certificate issued by Let's Encrypt R13 is present. The combination of self-referential mail routing and hosting provider alignment supplies concrete technical markers that defenders can reference when building block lists or sinkhole configurations. Several aspects remain uncertain including the precise content served at the time of each detection and any potential redirection chains that may have been active. No brand impersonation details or kit fingerprints are recorded in the available data so attribution to a specific campaign cannot be confirmed from the current intelligence alone. Defenders should continue monitoring the four ultahost nameservers and the 192.142.10.5 address for additional domains that share the same infrastructure. Blocking the domain at DNS and mail gateways is advisable given the existing blocklist presence and low trust score. Regular rechecks of the IP and nameserver set will help identify whether the operator migrates to new resources while maintaining the same operational pattern.