global-expertfx[.]com

The domain global-expertfx.com is currently active and hosts a website titled “global-expertfx.com | Providing Private, Corporate, and Institutional Clients with Personalized Wealth Management”. The site is served over HTTPS using a Let’s Encrypt R13 certificate, indicating encryption but not authentication of the operator. Registration records show the domain was created on 21 February 2026 through NiceNIC International Group Co., Limited, and is resolved to the IP address 198.27.109.53, which belongs to AS16276 operated by OVH SAS in Canada. DNS resolution uses the authoritative nameservers ns5.ddoscure.com and ns6.ddoscure.com. Technical fingerprints reveal the presence of Nginx as the web server, along with front‑end libraries such as Bootstrap, jQuery, Popper, OWL Carousel, and the Smartsupp chat widget. The page also embeds YouTube content. VirusTotal scans have flagged the domain by 7 of 93 security vendors, and the domain appears on at least one public phishing blocklist, where it is listed by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, and the site returns HTTP 200 responses, suggesting the content is being delivered without error. The combined indicators—recent registration, hosting on a shared OVH infrastructure, use of generic web‑technology stacks, low trust scoring, and multiple vendor detections—support the classification of this domain as a high‑risk social‑media phishing infrastructure. At present, the specific phishing lures, victim targeting, and credential‑collection mechanisms have not been publicly disclosed, limiting the ability to assess the full scope of the campaign. Defenders should block the domain at network perimeter and DNS layers, monitor for any outbound connections to the associated IP address, and add the nameservers to threat‑intel feeds. Continuous re‑scanning of the site and its hosting environment is recommended to detect any changes in payload or additional malicious activity.