globaltraceasset[.]com

Analysis of globaltraceasset.com indicates that the domain was registered on 27 February 2025 through HOSTINGER operations, UAB. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, and the domain resolves to the IPv6 address 2a02:4780:2b:1950:0:2bb4:f0af:2, which is announced by AS47583 Hostinger International Limited located in the United States. No TLS certificate is presented, and an HTTP request returns a 403 Forbidden status with the page title “403 Forbidden”. The lack of SSL combined with the 403 response suggests that the site is deliberately restricting access, a pattern sometimes observed in malicious infrastructure that serves content only to specific clients.

Mail exchange records are configured to mx1.titan.email (priority 10) and mx2.titan.email (priority 20), indicating the use of external email services for outbound communications. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal has flagged the domain in one of ninety‑five security vendor scans, and the domain appears on a single public blocklist. Additionally, the domain is listed as blocked by the PhishDestroy service, confirming that at least one anti‑phishing platform has taken mitigation action.

The combined evidence—recent registration, hosting on a shared provider, absence of TLS, low trust score, detection by a security vendor, inclusion on a blocklist, and active blocking by PhishDestroy—supports a high risk classification. However, the content behind the 403 response has not been publicly captured, and the specific phishing campaign payload or targeted brand remains unknown. Defenders should block the domain at the network perimeter, add it to DNS sinkhole lists, monitor for outbound connections to the associated IPv6 address, and ensure that email filters inspect messages originating from the listed MX hosts. Continuous re‑evaluation is advised in case additional detections emerge.