globalmagicstone[.]com

Analysis of the domain globalmagicstone.com indicates that it was registered through Dynadot LLC on 3 August 2025 and resolved to the IPv4 address 192.3.141.250, which is hosted by AS36352 (HostPapa) in the United States. The domain was configured with the authoritative nameservers ns1.anitahost.com and ns2.anitahost.com and did not present an SSL/TLS certificate at the time of observation. The page title returned by the HTTP response was the literal string “globalmagicstone.com”, providing no additional context. The site was identified as a brand‑impersonation campaign targeting the Across brand, as indicated by the “Impersonates: across” tag in the intelligence feed.

Multiple detection services have flagged the domain: seven out of ninety‑five VirusTotal scanners reported malicious behavior, and the Gridinsoft trust score was recorded as 0 / 100, reflecting a high confidence of abuse. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation platform. The current operational status is listed as offline, and the domain is no longer reachable via HTTP. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms employed, as no sample page content or URL paths have been disclosed.

Likewise, the absence of an SSL certificate limits the ability to assess certificate‑based spoofing techniques. Defenders are advised to continue monitoring the IP address 192.3.141.250 for any resurgence of malicious activity, enforce outbound filtering for the Across brand‑related domains, and ensure that existing web‑filtering solutions incorporate the observed blocklist entry. Organizations that have previously allowed traffic to HostPapa infrastructure should review logging for any connections to this IP during the period preceding the takedown. Incident response teams should treat any future appearance of globalmagicstone.