globalvests[.]com

The domain globalvests.com was observed by the PhishDestroy blocklist and remains active as of the report date. Registration records indicate the domain was created on 26 October 2023 through the registrar Atak Domain, and it is served by the hostmane.net name servers ns3.hostmane.net and ns4.hostmane.net. DNS resolution points to the IPv4 address 86.107.77.152, which is the sole host associated with the domain in current public records. The domain has been indexed by one security blocklist, and it was submitted to VirusTotal where 91 scanning engines evaluated the site without generating any detection flags; the absence of alerts does not constitute a safety assurance.

Analysis of the available infrastructure shows no additional sub‑domains or CNAME chains beyond the primary A record. The IP address does not resolve to a known cloud service provider, and no autonomous system or geolocation data is provided in the intelligence feed. SSL/TLS details were not disclosed, and HTTP response codes have not been reported, leaving the transport security posture unverified. The lack of publicly available page title or brand targeting prevents a more precise classification of the phishing lure, so the generic phishing label remains the most accurate descriptor.

Defenders should continue to block globalvests.com at DNS and proxy layers, monitor traffic to the associated IP address, and incorporate the domain into endpoint and email filtering rules. Because the site has already been flagged by PhishDestroy and appears on a blocklist, adding it to local blocklists will reduce exposure. Ongoing observation is recommended to detect any changes in hosting, additional domains, or emergence of malicious payloads. The current evidence suggests the domain is being used for credential‑stealing or similar fraudulent activities, but the exact victim profile and payload remain unknown pending deeper content analysis.