organiquespa[.]com[.]ng

The domain organiquespa.com.ng was a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Compound. This scam operated as a cryptocurrency phishing scheme, attempting to deceive victims into disclosing sensitive information or transferring assets under false pretenses. The site has since been taken offline, but it previously posed an elevated risk due to its active impersonation of a legitimate brand.

Technical indicators confirm organiquespa.com.ng as a malicious domain. It was flagged by 1 of 95 VirusTotal security vendors and appeared on 1 security blocklist, specifically PhishDestroy. The domain was registered through HostAfrica and resolved to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title included misleading content related to 'Organique SPA' despite impersonating Compound. Google Safe Browsing did not flag the domain, and its Gridinsoft trust score was 0/100. The domain's nameservers were dns1.webproserver.com and dns2.webproserver.com, with MX records pointing to itself.

Individuals who interacted with organiquespa.com.ng should take immediate action to secure their assets. If cryptocurrency transactions or wallet approvals were involved, revoke all token approvals and transfer funds to a new wallet. Monitor accounts for unauthorized activity and enable two-factor authentication (2FA) on all financial and cryptocurrency platforms. Report the domain to relevant authorities, such as local cybercrime units, and submit it to additional blocklists like Google Safe Browsing or PhishTank to prevent further abuse.