supportcentre[.]online

This domain, supportcentre.online, operates as a fraudulent customer support portal designed to harvest user credentials and sensitive personal information. Analysis indicates the site mimics legitimate help center interfaces, presenting a fabricated login portal under the page title 'Help Center - Customer Support.' The infrastructure is engineered to deceive users into submitting account details, payment information, or authentication tokens, which are then exfiltrated to attacker-controlled servers. The threat primarily targets individuals seeking technical assistance, exploiting trust in support channels to facilitate unauthorized access to user accounts or financial data. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, through Global Domain Group LLC, a registrar frequently associated with abusive registrations. It resolves to the IP address 163.61.188.222 and is currently flagged by 4 independent security blocklists, including MetaMask and SEAL. VirusTotal detection rates show 4 out of 95 security vendors classify the domain as malicious, while a Gridinsoft trust score of 0/100 further corroborates its fraudulent nature. Technologies detected on the site include LiteSpeed web server, Smartsupp live chat integration, and HTTP/3 protocol support, which may be leveraged to evade detection or enhance the illusion of legitimacy. Users who visited supportcentre.online should immediately revoke any credentials entered on the site, particularly for email, financial, or cryptocurrency accounts. Monitor linked accounts for unauthorized transactions or configuration changes, such as email forwarding rules or API key modifications. If payment details were submitted, notify financial institutions to flag potential fraudulent activity. Clear browser cache and stored credentials associated with the domain, and run a full system scan using updated security tools to detect potential malware or backdoors. Report the incident to relevant cybersecurity authorities or incident response teams to contribute to broader threat intelligence efforts.