globalmasach[.]com[.]telexcourier[.]com

The domain globalmasach.com.telexcourier.com is a confirmed phishing site engaged in brand impersonation and cryptocurrency scams. It falsely presents itself as associated with the brand 'across' and displays content mimicking Goldman Sachs, targeting victims with fraudulent digital banking claims. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, globalmasach.com.telexcourier.com has been taken offline.

Technical indicators show limited detection: 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not flag it. The domain appears on 1 security blocklist, specifically PhishDestroy. The creation date was recorded as February 21, 2026, though this may reflect falsified registration data. The SSL certificate was issued by R11, and the observed page title was 'Goldman Sach - Dedicated to innovating, simplifying, and humanizing digital banking.' No registrar or IP address data is available.

Victims of globalmasach.com.telexcourier.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. If login credentials were entered on the site, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor financial accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities.