glbiochem[.]net

The domain glbiochem.net has been identified as a phishing site specifically targeting customers of GL Biochem (Shanghai) Ltd., a legitimate peptide and amino acid manufacturer established in 1998. Analysis indicates this infrastructure was designed to impersonate the official GL Biochem brand, likely for fraudulent order processing, credential harvesting, or financial deception. The site is currently offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on March 10, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with suspicious registrations. It resolves to the IP address 101.99.94.39 and has been flagged by 1 security blocklist. Despite its recent creation, the domain has not yet been detected by any of the 95 security vendors on VirusTotal. Trust scores from Gridinsoft and Scamadviser are critically low at 3/100 and 1/100, respectively. The site employed a Let's Encrypt SSL certificate and was built using Node.js, Ubuntu, Nginx, and Express technologies, which are common in both legitimate and malicious web applications. Current evidence suggests this phishing infrastructure was taken offline following detection by PhishDestroy. However, the domain remains registered and could be reactivated or repurposed. Organizations and individuals are advised to block the domain and associated IP address (101.99.94.39) at the network level. Customers of GL Biochem should verify all communications through official channels and avoid interacting with unsolicited emails or websites claiming to represent the company. Monitoring for similar domains registered through Fewmoretaps OU or resolving to the same IP range is recommended to preempt further fraud attempts.