globex-expresstrade[.]com

The domain globex-expresstrade.com was registered on March 21, 2026 through TuringSign Inc. d/b/a Cosmotown and remains active as of the report date, July 27, 2026. Infrastructure analysis shows the domain is delegated to the stablewebtech.com name servers (ns1.stablewebtech.com and ns2.stablewebtech.com) and resolves to the IPv4 address 86.107.77.57. The host is currently listed on one security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that threat‑intelligence feeds have identified it as malicious.

VirusTotal scans report that eight of ninety‑one security vendors flag the domain, providing modest but notable consensus of malicious intent. No public SSL certificate details, HTTP response codes, Safe Browsing verdicts, OTX entries, or page‑title metadata have been disclosed, and therefore the presence or absence of encrypted transport, redirection behavior, or content‑based indicators cannot be confirmed at this time. The limited detection count suggests that the phishing campaign may be in an early deployment stage or employing a low‑profile hosting configuration to evade broader detection.

Defenders should proactively block the domain at perimeter firewalls, DNS resolvers, and proxy layers, and monitor outbound connections to the associated IP address. Continuous re‑evaluation of the host through VirusTotal, Google Safe Browsing, and threat‑intel platforms is advised, as additional detections may emerge. Organizations should also review email filtering rules for messages referencing "globex" or "expresstrade" to mitigate credential‑ harvesting attempts that could be facilitated by this infrastructure.