On 31 July 2026, analysis of nigerianembassycaracas.org indicates that the domain remains active and is being leveraged for a generic phishing campaign. The domain was registered on 18 December 2014 through Wild West Domains, LLC and is currently hosted at IP address 192.185.160.45. DNS resolution is provided by ns1129.websitewelcome.com and ns1130.websitewelcome.com, both belonging to the WebsiteWelcome hosting platform. VirusTotal records show that 2 of 91 scanned security vendors have flagged the domain, suggesting limited but non‑trivial detection.
The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one security community has identified malicious activity. No additional public reputation services or Safe Browsing checks are referenced in the available intelligence. The limited detection count and single blocklist entry imply that the phishing infrastructure may be low‑profile or recently re‑used, but the presence of any detections demonstrates that defensive controls can identify the threat.
Defenders should add the domain and its associated IP address to outbound filtering rules, monitor DNS queries for the listed nameservers, and ensure that email gateway solutions reference the latest blocklist feeds that include this indicator. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection status. Given the high risk rating, organizations handling sensitive credential flows should treat any communications appearing to originate from the domain as malicious until proven otherwise.