globexshipping[.]online[.]parceltracx[.]org

On July 24, 2026, the domain globexshipping.online.parceltracx.org was identified as a potential brand impersonation threat targeting AliExpress. The domain was taken offline, which may indicate a response to security measures or a temporary cessation of malicious activities. The page title 'Package tracking with tracking number' suggests that the domain was designed to mimic a legitimate package tracking service, potentially misleading users into providing sensitive information or performing actions that could compromise their security.

Infrastructure analysis reveals that the domain resolves to the IP address 198.12.80.250, which is located in the United States and is associated with the hosting provider AS36352 HostPapa. The domain was registered through NameCheap, Inc. on December 27, 2024. While the domain appears on one security blocklist and is flagged by 2 out of 95 security vendors, the lack of an SSL certificate and a low Gridinsoft trust score of 0/100 further indicate its suspicious nature.

The exact content and structure of the website have not been analyzed, but the domain's association with AliExpress and its offline status suggest that it was likely used for phishing or other fraudulent activities. Defenders should block this domain and monitor for any reactivation or similar domains that may be used in future attacks. Additionally, users should be educated to verify the authenticity of package tracking links and to avoid clicking on suspicious URLs.