winningloballimited[.]com

Analysis as of July 27 2026 indicates that winningloballimited.com remains active and is being used for a generic phishing campaign. The domain was registered on 31 March 2024 through Internet Domain Service BS Corp and is hosted on nameservers ns1.hostmane.net, ns2.hostmane.net, ns3.hostmane.net and ns4.hostmane.net. DNS resolution points to the IPv4 address 86.107.77.152.

VirusTotal reports a single positive detection out of 91 scanned security vendors, confirming that at least one scanner identified malicious activity associated with the domain. The domain is listed on one public security blocklist and is actively blocked by the PhishDestroy filtering service. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts has been published, so the precise phishing payload and targeted brand remain unknown.

The limited detection footprint suggests the infrastructure is either newly deployed or deliberately low‑profile, but the presence on a reputable blocklist and the confirmed vendor detection justify a high‑risk classification. Defensive operators should add the FQDN and its resolving IP address to network deny lists, enforce DNS sink‑hole rules, and monitor for any outbound connections to 86.107.77.152. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in the detection count, and any observed credential‑phishing attempts should be logged and escalated according to incident‑response procedures.