globalprofitcapital[.]com

PhishDestroy identifies globalprofitcapital.com as an active phishing domain leveraging a crypto drainer scheme to deceive users into transferring cryptocurrency assets. The domain impersonates a financial investment service, specifically targeting individuals seeking high-yield returns. Current investigations classify this threat as a generic phishing operation with active infrastructure, posing a significant risk to users engaging with unsolicited investment opportunities. This domain was flagged by 1 out of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious. It was registered through Hosting Concepts B.V. d/b/a Registrar.eu, utilizing a Let's Encrypt SSL certificate for perceived legitimacy. The domain resolves to IP address 198.251.84.200 and was created on January 07, 2026, suggesting a recently established operation. Trust scores and historical reputation data show no prior associations with known malicious activities, though the absence of detections does not equate to safety. The domain’s recent creation and lack of blocklist entries indicate a potentially emerging threat requiring immediate scrutiny. As of the latest assessment, globalprofitcapital.com remains an active and unresolved threat. Users are strongly advised to avoid interacting with this domain or any associated links, particularly those promoting cryptocurrency investments. To verify the legitimacy of financial services, cross-reference domains on PhishDestroy before engaging. Security teams should consider blacklisting this IP (198.251.84.200) and domain at the network level while monitoring for additional infrastructure tied to this campaign. Immediate reporting of this domain to threat intelligence platforms is recommended to aid in broader detection and prevention efforts.