globefusebnk[.]com

Analysis of globefusebnk.com indicates that the domain was registered on 19 June 2026 through the Atak Domain registrar. The domain resolves to the IPv4 address 5.182.208.207 and is served by the authoritative name servers ns5.maskhosting.com and ns6.maskhosting.com, both associated with the maskhosting.com hosting provider. VirusTotal reports that 2 of 91 scanning engines have flagged the domain as malicious, confirming the presence of at least some suspicious activity. The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, yet it remains reachable and active as of the report date, 27 July 2026.

The threat classification provided is generic phishing, and the risk rating is high. No public page title, SSL certificate details, or HTTP response information are currently available in the intelligence feed, so the specific payload or credential‑stealing mechanisms cannot be confirmed. The limited detection history—only two vendor detections and one blocklist entry—suggests that the infrastructure may be newly deployed or intentionally low‑profile, but the active status and hosting environment indicate a functional phishing operation.

Defenders should add 5.182.208.207 and globefusebnk.com to deny‑list or firewall rules, monitor DNS queries for the associated name servers, and consider sink‑holing the domain to disrupt any credential collection attempts. Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture any new detections. Because the site’s content has not been publicly analysed, threat‑intel teams should prioritize manual inspection when safe to do so, and monitor for any related indicators of compromise that may emerge from compromised accounts or phishing campaigns referencing this domain.