globuse-capital[.]org

This domain, globuse-capital.org, was registered on 2026-06-07 through NameSilo, LLC and is currently resolved to the IPv4 address 163.61.188.2, which geolocates to the United States and is associated with the Massachusetts Institute of Technology network. The site presents a valid TLS certificate issued by Let’s Encrypt (YR1) and returns HTTP 200 responses over HTTP/3. Automated analysis identified the use of Tailwind CSS, LiteSpeed web server, Alpine.js, Smartsupp chat widget, jsDelivr CDN, and HTTP/3 protocol. The page title returned by the server is “Home – Globus E‑Capital Banking”, indicating an attempt to impersonate a financial institution. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and six of ninety‑one VirusTotal scanners flagged the domain as malicious. The domain appears in four AlienVault OTX pulses and is listed on one public blocklist; it is also blocked by the PhishDestroy service. Although the precise phishing workflow (e.g., credential‑capture forms) has not been publicly disclosed, the combination of a high‑risk classification, active status, and multiple detections suggests a live campaign. Defenders should add globuse-capital.org to network and endpoint deny lists, monitor DNS queries for the 163.61.188.2 address, and consider sinkholing the domain. Continuous threat‑intel feeds should be consulted for any updates to the detection count or observed payloads.