globalsupport[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

This domain, globalsupport.com, is identified as a credential theft phishing operation targeting users in the logistics and supply chain sectors. Analysis indicates the site mimics legitimate back-office support, direct trucking, and wholesale distribution services to deceive victims into submitting sensitive credentials, including corporate login details, financial information, or personal data. The page title, 'Global Support - Back office Support, Direct Trucking & Direct Logistics, Fresh Produce Wholesale And Package Food Distribution,' aligns with common impersonation tactics used to exploit trust in established industry brands.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports 3 out of 95 security vendors flagging globalsupport.com as malicious, while it appears on one security blocklist. The domain was registered on April 28, 2026, through GoDaddy.com, LLC, an unusually future creation date suggesting potential typosquatting or preemptive registration for malicious use. It resolves to the IP address 15.197.225.128 and employs GoDaddy Website Builder, jQuery, and HSTS, alongside a GoDaddy-issued SSL certificate. The domain has since been taken offline, but its infrastructure remains a potential risk for re-emergence.

Users who visited globalsupport.com or interacted with its content should take immediate action. Reset any credentials entered on the site, particularly those linked to corporate or financial accounts. Monitor associated accounts for unauthorized transactions or access attempts. If the domain was accessed via a corporate device or network, report the incident to internal security teams for further investigation. Consider implementing additional authentication measures, such as multi-factor authentication, to mitigate potential account compromise. Organizations in the logistics sector should proactively block this domain and its associated IP address to prevent future exposure.