bar[.]claystltd[.]com

Analysis of the domain bar.claystltd.com indicates it was actively used for a tech support scam impersonating Google, as classified in threat intelligence sources. The domain, created on February 21, 2026, resolved to the IP address 198.12.93.82, hosted on AS36352 (HostPapa) in the United States. The SSL certificate was issued under the R11 root, a detail that may assist in identifying related infrastructure. The page title, 'Home - Bar-Clays Ltd,' does not align with the targeted brand, suggesting either a misconfiguration or an attempt to obscure the true nature of the site during initial scans.

VirusTotal detections from 11 of 93 security vendors confirm malicious classification, while the domain appears on at least one security blocklist. GridinSoft assigned a trust score of 0/100, reinforcing its high-risk designation. The domain is currently offline, having been taken down following detection by PhishDestroy.

While the exact content of the site remains unanalyzed, the available indicators—including the scam type, brand impersonation, and hosting details—provide sufficient evidence for defenders to treat this domain as a confirmed threat. Organizations should ensure this domain and its associated IP are blocked at the network level, and related SSL certificates should be flagged for potential revocation or monitoring. Further investigation into the hosting provider's network may reveal additional compromised or malicious domains linked to the same infrastructure.