ibs[.]meridianglobalmobile[.]com

The domain www.ibs.meridianglobalmobile.com was registered on February 21, 2026 through Dynadot LLC and is currently active. DNS resolution points to IP address 163.61.188.2, which is announced by AS153568 NEW DHAKA HARDWARE and geolocated to the United States. The host presents a valid TLS certificate from Let’s Encrypt (R12) and responds with HTTP status 200. Infrastructure analysis shows the domain uses a Lytehosting name server set (dns1.lytehosting.com through dns4.lytehosting.com) and runs a web stack identified as LiteSpeed with front‑end libraries including Bootstrap, jQuery, GSAP, OWL Carousel, Smartsupp, and HTTP/3 support. Reputation signals are uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, the domain is listed on one security blocklist, and PhishDestroy has actively blocked it. VirusTotal reports that 2 of 93 scanning engines flag the domain, reinforcing the high‑risk assessment. The classification in the intelligence feed is generic_phishing, indicating that the site is likely employed to harvest credentials or personal data. Defenders should add the domain and its resolving IP to outbound and inbound blocklists, monitor DNS queries for the associated Lytehosting name servers, and consider sinkholing traffic to mitigate potential credential harvesting. Continuous re‑evaluation is advised, as the active status and recent registration suggest ongoing malicious use.