globalsumudus[.]org

This domain is currently active and serves a page titled “Website under maintenance” returning HTTP 200. It was registered on 24 April 2026 through Fewmoretaps OU d/b/a Trustname.com and uses a Let’s Encrypt certificate (R13). The authoritative nameservers are ns11.infomaniak.ch and ns12.infomaniak.ch, resolving to IP 185.125.27.89 located in Switzerland and owned by Infomaniak Network SA. Reputation data show a Gridinsoft trust score of 0/100 and a single AlienVault OTX pulse referencing the domain. The domain appears on one public blocklist and has been flagged by PhishDestroy. VirusTotal analysis reports that 1 of 94 scanned vendors flagged the domain as malicious. No additional content or target brand has been disclosed, and the page content remains a generic maintenance placeholder, leaving the intended phishing lure unknown. Defenders should add globalsumudus.org to web‑filter and DNS block lists, monitor for any future changes to the hosted content, and consider correlating inbound traffic logs for requests to this IP. Ongoing observation of the associated IP and any new threat‑intel references is recommended.