sparespace[.]com[.]ng

Analysis of sparespace.com.ng has confirmed it as a high-risk domain involved in credential theft. The domain does not impersonate a specific brand but is designed to trick users into revealing sensitive information such as usernames and passwords. The threat leverages a deceptive web interface to capture credentials, making it particularly dangerous for unsuspecting visitors.

Technical indicators reveal that sparespace.com.ng has a VirusTotal score of 4/95, indicating that 4 out of 95 security vendors flag this domain as malicious. The domain is registered through TRUEHOST CLOUD and resolves to the IP address 163.61.188.7. It was created on October 29, 2025, and has a Gridinsoft trust score of 0/100, suggesting a complete lack of trustworthiness. Additionally, the domain appears on 1 security blocklist, further confirming its malicious nature. The SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites, and does not inherently indicate trustworthiness.

The domain remains active and continues to pose a significant risk to users. Immediate response actions include blocking the domain at the network level, educating users about the specific threat, and monitoring for any additional malicious activity. Despite efforts to mitigate the threat, there remains a risk of ongoing credential theft, and users should be cautious when interacting with any links or pages related to this domain.