globalbusinesspays[.]com

globalbusinesspays.com was registered on March 6, 2026 through GoDaddy.com, LLC and is served from the IP address 160.153.0.86. The domain resolves via the default GoDaddy nameservers ns51.domaincontrol.com and ns52.domaincontrol.com and presents a TLS certificate issued by Google Trust Services (WE1). The certificate is valid for the host name and the HTTP response returns status 200, indicating the site is actively delivering content.

The landing page uses the title “Global Business Pay | E - Wallet”, a phrasing commonly employed in fraudulent e‑wallet and cryptocurrency lure campaigns. The page’s visual design mimics legitimate payment platforms and solicits user credentials or cryptocurrency transfers, matching the classified scam type of “cryptocurrency”. No additional legitimate branding is observed, reinforcing the malicious intent.

Reputation data corroborates the malicious assessment. Gridinsoft assigns a trust score of 1 out of 100, and VirusTotal records 1 positive detection out of 95 scanned security vendors. The domain appears on a single public blocklist and is actively listed by PhishDestroy. The risk level is marked high, and the current status is listed as active, indicating ongoing operation.

Defenders should add 160.153.0.86 and the domain globalbusinesspays.com to network deny lists, enforce URL filtering, and monitor DNS queries for the associated GoDaddy nameservers. Email gateways should block inbound messages that reference the e‑wallet terminology and any requests for cryptocurrency payments originating from this host. Incident response teams should collect HTTP traffic samples for further forensic analysis and advise users to avoid providing credentials or funds to the site.

At present, limited forensic artifacts are publicly available; the precise phishing kit or infrastructure reuse patterns have not been disclosed. Continuous monitoring is advised to detect possible expansion to additional domains or changes in hosting.