globalintbn[.]com

Analysis indicates that globalintbn.com is an active phishing domain targeting users of Global Bank. The domain was registered on April 10, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu and currently resolves to the IP address 194.36.191.196. The site presents itself with the page title 'Global Bank | Home,' suggesting an attempt to impersonate the legitimate financial institution. As of July 12, 2026, the domain is flagged by 6 of 95 security vendors on VirusTotal and appears in 14 threat intelligence pulses on AlienVault OTX. It is also blocked by at least two security blocklists, including PhishDestroy and BLP-Malware, and holds a trust score of 0/100 from Gridinsoft. Infrastructure analysis reveals the use of a Let's Encrypt SSL certificate, a common tactic among phishing sites to appear legitimate. The domain remains active, with no evidence of takedown or mitigation at this time. Defenders should treat this domain as high-risk and prioritize blocking it at the network level, particularly in environments where Global Bank is a known service provider. Further investigation into the hosting infrastructure, including the ASN and geolocation of the IP, is recommended to identify potential linked campaigns. The exact phishing kit or payload delivery mechanism is not yet analyzed, so monitoring for additional indicators of compromise is advised.