saturngloba[.]com

saturngloba.com is currently active and serves a page titled “Saturn Global Bank – Europe – Banking at your fingertip”. The domain was registered on February 21 2026 through Cosmotown, Inc. and is hosted on the IP 163.61.188.5, which resolves to AS153568 NEW DHAKA HARDWARE in the United States. DNS resolution uses four Lytehosting nameservers (dns1‑4.lytehosting.com). The site presents a valid Let’s Encrypt certificate (R13) and returns HTTP 200. Automated analysis shows a WordPress stack with MySQL, PHP, Bootstrap, LiteSpeed, Underscore.js, prettyPhoto and OWL Carousel. Threat intelligence assigns a high risk rating; the Gridinsoft trust score is 1/100 and the domain appears on one security blocklist. VirusTotal scans reported 11 of 93 vendors flagging the domain as malicious. PhishDestroy has also listed the host as blocked. The available data confirm that the site is being used for generic phishing, but the specific payload, credential‑capture mechanisms, and target audience have not been disclosed. Defenders should block the domain and associated IP at perimeter and DNS layers, monitor for any outbound connections to the host, and update detection rules to include the identified nameservers and technology fingerprint. Continuous re‑assessment is recommended as additional indicators may emerge.