firstglobalmarket[.]com

Analysis of firstglobalmarket.com indicates a brand‑impersonation operation targeting the “base” brand. The domain was registered on August 26 2024 through NameSilo, LLC and is hosted on IP 107.173.193.235, an address owned by AS36352 HostPapa in the United States. The site lacks an SSL certificate and currently returns no HTTP response because it has been taken offline, a status confirmed by the blocklist entry from PhishDestroy and by its appearance on a single security blocklist. Reputation services assign a Scamadviser trust score of 1 out of 100, reflecting extreme risk.

VirusTotal scans show that 13 of 95 antivirus and URL‑reputation engines flagged the domain, reinforcing the malicious assessment. AlienVault OTX records the domain in one threat‑intel pulse, providing additional corroboration. The page title observed during the brief crawl was “1 new message”, which offers no further context about the payload or landing page. Nameservers resolve to ns1.ltxcloud.com and ns2.ltxcloud.com, a configuration commonly seen in disposable hosting setups.

No additional indicators such as SSL fingerprints, redirect chains, or content hashes are available, leaving the exact phishing kit and lure details unknown. Defenders should add 107.173.193.235 to network‑level deny lists, block firstglobalmarket.com at DNS resolvers, and monitor for any future re‑registration or similar domains using the same registrar or hosting provider. Continuous threat‑intel feeds should be consulted for updates from PhishDestroy, VirusTotal, and AlienVault OTX to capture any resurgence of the campaign. Organizations that use the “base” brand should educate users about unsolicited messages referencing “1 new message” and enforce multi‑factor authentication to mitigate credential compromise.