globaltradecapitalltd[.]com

The domain globaltradecapitalltd.com was registered on 21 February 2026 through Sav.com, LLC. DNS resolution points to the IPv4 address 198.12.80.250, which belongs to AS36352 operated by HostPapa and is geolocated in the United States. The domain uses Cloudflare nameservers (aarav.ns.cloudflare.com, wren.ns.cloudflare.com) and presents an SSL certificate identified as R12. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low confidence rating.

Reputation services have flagged the site. VirusTotal reports that 13 of 95 security vendors have marked the domain as malicious, and the domain appears on a single security blocklist. PhishDestroy has actively blocked the domain. The HTTP response returns status code 200 and the page title is identical to the domain name. The site is categorized as a tech_support scam that impersonates Google, matching the declared brand target.

Analysis confirms the presence of high‑risk indicators: a recent registration, low trust score, active blocklist entry, and multiple vendor detections. However, the limited number of blocklist listings and the single blocklist source leave open the possibility that additional detection feeds have not yet observed the domain. No further details about the payload, command‑and‑control infrastructure, or victim interaction have been disclosed.

Defenders should add the domain to outbound and inbound filtering rules, monitor DNS queries for 198.12.80.250, and enforce blocklisting of the identified IP and associated Cloudflare name servers. Incident response teams should treat any communication that references Google and originates from this domain as malicious, and users should be warned about unsolicited tech‑support solicitations. Continuous threat‑intel feeds should be consulted for updates, and any observed attempts should be logged for forensic correlation.