febultrades[.]com

Analysis as of July 23, 2026 indicates that the domain febultrades.com is presently offline yet displays a set of artifacts consistent with a brand‑impersonation tech‑support scam aimed at Google users. The domain was registered on July 30, 2025 through Global Domain Group LLC and resolves to the IP address 192.3.141.252, which belongs to the AS36352 HostPapa network located in the United States. The server presents a Let's Encrypt R13 certificate, confirming the use of a publicly trusted TLS chain. Observed web technologies include Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, Modernizr, jQuery, and HTTP/3, suggesting a modern web stack often leveraged for rapid deployment of fraudulent pages.

The page title returned by the host is "Welcome - Febull Trades," which does not reference the impersonated brand, but the intelligence set lists Google as the targeted brand and classifies the operation as a tech‑support scam. The domain appears on a single security blocklist, PhishDestroy, and 14 of 95 VirusTotal scanners flagged the host, reinforcing the malicious assessment. MX records contain a single entry with priority 0 pointing to _dc-mx.a415acbb0d45.febultrades.com, indicating a custom mail setup likely used for victim communication.

Scamadviser assigns a trust score of 1 out of 100, reflecting extreme suspicion. Defenders should continue to block the IP and domain at perimeter defenses, monitor for any re‑registration attempts, and add the associated MX host to mail‑filtering rules. Given the observed infrastructure and vendor detections, remediation actions are justified despite the domain’s offline status.