ngandc[.]com

Analysis of the domain ngandc.com indicates it was actively impersonating the NG & C Highrise brand, as evidenced by the page title 'Home - NG & C Highrise' and its classification as a brand impersonation scam. The domain was registered on March 17, 2026, through OwnRegistrar, Inc., and resolved to the IP address 163.61.188.7, hosted in the United States. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Bootstrap, LiteSpeed, and plugins such as Slider Revolution and Slick, which are common in both legitimate and malicious websites but often exploited in phishing campaigns due to their widespread use and known vulnerabilities. The domain was flagged by one security vendor on VirusTotal and appears on a single security blocklist, suggesting limited but confirmed detection.

It was also identified in one AlienVault OTX threat intelligence pulse, further corroborating its malicious classification. The SSL certificate, issued by Let's Encrypt (R12), is typical for both legitimate and fraudulent sites, providing no definitive indication of intent but confirming encrypted communication was possible. Nameservers (dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com) point to LyteHosting, a provider occasionally associated with low-reputation or bulletproof hosting services. As of July 23, 2026, the domain has been taken offline, and it is blocked by PhishDestroy, indicating proactive mitigation.

The Gridinsoft trust score of 0/100 reflects its high-risk status. While the exact content of the site remains unanalyzed, the combination of brand impersonation, detection by security vendors, and infrastructure characteristics aligns with known phishing tactics. Defenders should treat this domain as confirmed malicious and monitor for any re-emergence or related infrastructure, particularly under the same registrar or hosting provider.