globalexpressshipcom[.]com

The domain globalexpressshipcom.com was registered on February 21 2026 through the registrar Cosmotown, Inc. It is currently active and classified under the threat type “shipping scam” with a generic phishing profile. The domain resolves to the IPv4 address 161.129.70.235 and is hosted by Interserver, Inc. The site presents a TLS certificate issued by Let’s Encrypt (R13) and returns HTTP 200 responses over HTTP/3.

Infrastructure analysis shows the host IP belongs to AS19318, confirming the server’s location in the United States. The authoritative name servers are vivid1.gfireservers.in and vivid2.gfireservers.in, both indicating use of the gfire hosting platform. The web application stack includes Bootstrap, jQuery, Popper, LiteSpeed web server, and the Smartsupp chat widget, all delivered over HTTP/3.

Threat intelligence indicates the domain appears on a single security blocklist, PhishDestroy, and has received a Gridinsoft trust score of 0 out of 100, reflecting a high confidence of malicious intent. The page title “Global Express Shipping Company” aligns with the reported scam type, suggesting the site is being used to impersonate a shipping service for phishing or fraudulent transactions. No detections were reported by VirusTotal at the time of analysis, but the absence of detections does not constitute evidence of benign behavior.

Defenders should treat globalexpressshipcom.com as a high‑risk indicator. Network sensors should block outbound connections to the IP 161.129.70.235 and to the associated name servers. Email security gateways should flag any messages containing URLs that resolve to this domain. Continuous monitoring for changes in the site’s content, additional blocklist listings, or new malicious detections is advised to adjust response actions promptly.