meboxchest[.]com

This domain, meboxchest.com, is flagged for brand impersonation phishing targeting the ME Foundation. Analysis indicates the site was designed to mimic the legitimate ME Foundation webpage, as evidenced by the page title 'ME Foundation' and the domain's creation context. The threat type aligns with credential harvesting or fraudulent donation solicitation, a common tactic in brand impersonation schemes.

Technical indicators reveal the domain was registered on February 21, 2026, and resolved to the IP address 188.114.97.3, hosted on Cloudflare infrastructure (AS13335). VirusTotal detection shows 12 out of 95 security vendors flagged the domain as malicious. The domain appears on two security blocklists and is associated with an SSL certificate issued under the identifier 'WE1'. No Google Safe Browsing (GSB) record was found at the time of analysis, but the domain's offline status may affect real-time detection.

Currently, meboxchest.com is offline, reducing immediate risk to end-users. However, the domain remains registered and could be reactivated. Response actions include continued monitoring of the domain's DNS records and SSL certificate updates. Organizations targeted by this campaign should audit logs for connections to the IP 188.114.97.3 and review user reports of phishing attempts referencing the ME Foundation. Remaining risk includes potential reuse of the domain or infrastructure for future phishing operations.