globalworldlimited[.]com

The domain globalworldlimited.com was a phishing site engaged in brand impersonation targeting Ethereum users. It posed as a legitimate Ethereum-related service to deceive victims into disclosing sensitive information or credentials, though no crypto drainer kit was observed. The site is currently taken offline, reducing immediate risk but not eliminating potential follow-up threats from data already harvested.

Technical indicators confirm the elevated risk level. globalworldlimited.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) and was registered through HOSTINGER operations, UAB on October 17, 2023. The domain resolved to IP address 86.107.77.165, located in Germany under AS216395 (HostBet Cloud Technologies Private Limited), with nameservers ns1.hostmane.net and ns2.hostmane.net. No SSL certificate was present, and the observed page title was 'Global World'. Google Safe Browsing did not flag the domain at the time of analysis.

Victims of globalworldlimited.com should take immediate action to secure accounts. If credentials were entered, change passwords for all associated services and enable two-factor authentication (2FA). Monitor accounts for unauthorized transactions or login attempts and report suspicious activity to the affected platform. For Ethereum users, review wallet activity and consider revoking any suspicious token approvals. Report the phishing domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.