gloexpressdel[.]icu

PhishDestroy identifies gloexpressdel.icu as an active fake delivery scam domain designed to trick victims into revealing personal or payment details under the guise of a shipping notification. The site impersonates legitimate courier services, likely targeting users expecting parcels by mimicking official-looking notices with malicious links or forms. Security analysis confirms this is not a minor risk but an elevated threat due to its current active status and deceptive tactics aimed at exploiting trust in delivery services. This domain was flagged by exactly 2 out of 95 VirusTotal security vendors, indicating limited but concerning detection coverage. Registered on January 22, 2026, through Global Domain Group LLC, it uses a Let's Encrypt SSL certificate and resolves to IP 37.49.229.75 — common tactics to appear legitimate. The recent creation date suggests this scam is part of a fast-moving campaign, likely leveraging urgency (e.g., 'Your package is delayed') to bypass rational scrutiny and prompt hasty user actions. If you visited gloexpressdel.icu, do not enter any passwords, credit card numbers, or personal information. Close the browser immediately and clear your cache if you clicked any links. Run a malware scan using trusted antivirus software like Malwarebytes or Windows Defender. Report the domain to your email provider or local cybercrime unit if you received a suspicious link. Avoid future visits by blocking the domain in your hosts file or firewall. Always verify delivery notifications by contacting the courier directly using their official website or customer service number.