The domain globalmiddasfoundation.com was registered on May 24, 2024 through Network Solutions, LLC. Its authoritative nameservers are ns1.bh-18.webhostbox.net and ns2.bh-18.webhostbox.net, and the A record resolves to 207.174.214.171. The hosting appears to be provided by the WebhostBox service, a platform frequently used for short-lived malicious sites. Google Safe Browsing classifies the domain as a social‑engineering threat, and PhishDestroy has added it to its blocklist. In addition, the domain appears on one other security blocklist, giving it a total of two known listings.
VirusTotal reports that 4 out of 91 scanned security vendors flagged the domain, indicating that multiple independent engines have identified malicious behavior. The specific detection signatures were not disclosed, but the presence of any positive flags supports the high‑risk rating. No public TLS certificate details, page title, or content analysis have been published, so the exact landing page characteristics remain uncertain. Defenders should update proxy and firewall policies to block traffic to both the domain name and its IP address 207.174.214.171.
Email security gateways should treat any messages containing links to this domain as suspicious. Continuous monitoring of the IP address and associated hostnames is advised, as the infrastructure may be reused in future campaigns. Because the domain is still active, remediation actions such as sink‑holing or blocking the IP are recommended to prevent further victim exposure.