worldwidesupp[.]com

Analysis of worldwidesupp.com shows a domain that has been actively flagged as a phishing vector. The site was registered on May 16, 2025 through NameCheap, Inc. and is currently listed as taken offline. DNS resolution points to the IPv4 address 176.123.2.40, which is hosted in Maryland and belongs to AS200019 ALEXHOST SRL. The authoritative nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com, indicating the domain uses the registrar‑provided DNS infrastructure.

An SSL certificate issued by Let’s Encrypt (E7) is present, providing encrypted transport but offering no assurance of legitimacy. The page title returned from the live endpoint reads "Coming Soon - worldwidesupp.com," a generic placeholder that does not convey any functional content. Reputation signals are overwhelmingly negative: Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on one known security blocklist. PhishDestroy has explicitly blocked the domain, reinforcing the phishing classification.

VirusTotal scans report that five of ninety‑three security vendors have flagged the domain, further corroborating malicious intent. Despite the offline status, the infrastructure remains observable and could be reactivated, so defenders should continue to treat the domain and its hosting IP as hostile. Recommended mitigation steps include adding the domain and its IP address to network and email filtering blocklists, monitoring the registrar‑servers.com nameservers for any re‑registration activity, and employing threat‑intel feeds that reference the current blocklist entry. Continuous re‑scanning of the domain via multi‑vendor services is advised to capture any changes in detection posture.