globalextrding.com

Analysis of globalextrding.com indicates that the domain was registered on April 29, 2026 via OwnRegistrar, Inc. The authoritative name servers listed are ns1.srvconfigr.com and ns2.srvconfigr.com, with a placeholder entry 'null' observed. DNS resolution points to the IPv4 address 213.165.249.109. VirusTotal has recorded 15 detections out of 91 scanners, confirming that a notable portion of security vendors classify the domain as malicious. The domain appears on at least one public blocklist; PhishDestroy currently blocks it, providing additional confirmation of its phishing nature. The threat intelligence label assigned is generic phishing, and the risk level is high.

The domain remains active as of the report date, July 27, 2026. The available evidence establishes a clear malicious profile, but several operational details remain unknown. No public information on SSL certificate validity, HTTP response codes, or page content has been disclosed, limiting visibility into the specific lure or credential‑harvesting mechanisms employed. Likewise, the absence of data from threat‑sharing platforms such as OTX or Safe Browsing prevents correlation with broader campaigns. Consequently, attribution of the infrastructure to a particular actor or group cannot be asserted at this time.

Defenders should incorporate the domain into existing URL filtering and sink‑hole policies. Immediate blocking at the firewall or proxy level is advised, leveraging the known IP address 213.165.249.109 and the identified nameservers to intercept DNS queries. Continuous monitoring of VirusTotal and blocklist updates is recommended to capture any changes in detection counts or additional listings. Organizations that have observed traffic to this domain should collect DNS logs, payload samples, and any associated email headers for further forensic analysis and possible sharing with industry‑wide threat‑intel feeds.