track[.]globaltracklabs[.]com

On July 23, 2026, the domain track.globaltracklabs.com was observed to be offline, returning an HTTP 404 status with the page title “404 Not Found”. The domain was registered through Tucows Domains Inc. on November 25, 2025 and is hosted on Amazon Web Services, specifically an AWS CloudFront edge location identified as Germany (IP 108.138.26.111). The SSL certificate presented is issued to “Amazon / Amazon RSA 2048 M01”, confirming the use of Amazon‑managed TLS. Service fingerprinting detected Nginx, Amazon CloudFront, and HTTP/3 support.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. VirusTotal scans show 17 of 91 anti‑malware vendors flagging the domain, indicating a moderate level of detection across the community. Name server records point to ns1.siteground.net and ns2.siteground.net, which are unrelated to the AWS front‑end and may reflect historical configuration. No additional page content was captured, and the 404 response limits current visibility into any phishing payload that may have been served prior to takedown.

Given the combination of a recent registration, AWS hosting, a valid Amazon certificate, and multiple vendor detections, the infrastructure should be considered hostile. Defensive recommendations include adding the IP address 108.138.26.111 and the domain track.globaltracklabs.com to network blocklists, monitoring DNS queries for the associated SiteGround name servers, and continuing to track changes in the VirusTotal detection count. Analysts should also verify whether the domain reappears under a different IP or certificate, as threat actors often migrate hosting while preserving the same registration details.