globalcourier-express[.]com

Analysis of the domain globalcourier-express.com shows a newly registered site (created 12 May 2026) that is currently active and classified as a generic_phishing threat. The domain resolves to IP 198.251.84.200, which geolocates to Luxembourg and is associated with FranTech Solutions. Infrastructure details include four nameservers (ns5.asurahosting.com, ns5.my-control-panel.com, ns6.asurahosting.com, and a fourth entry truncated in the source), a Let's Encrypt R13 SSL certificate, and an HTTP 302 response indicating a redirect. The site has been flagged by PhishDestroy, appears on a single security blocklist, and is referenced in one AlienVault OTX pulse. Reputation scoring from Gridinsoft is 0/100, reinforcing the low trust assessment. A VirusTotal scan involving 92 vendors returned no detections, but the absence of alerts does not constitute validation of safety. The registration was performed through Global Domain Group LLC. While the page title "Globalcourier-Express Logistic, Delivery and Transportation" suggests a logistics theme, no further content analysis is available. Defenders should continue to monitor the domain, block network traffic to the IP address, and add the domain to local deny lists. Additional scrutiny of any emails or links referencing this domain is advised, and any observed attempts to exploit it should be reported to appropriate incident response teams for further investigation.