kbqvw[.]cfd

This report analyzes the domain kbqvw.cfd, identified as a tech support scam site impersonating Google. The page title is listed as a single period, indicating a blank or placeholder page, but its registration and detection patterns confirm its malicious intent. The site poses a threat by attempting to trick users into believing they are interacting with Google support, likely to extract personal information, payment details, or remote access to victims' devices under the guise of technical assistance.

Technical evidence shows kbqvw.cfd was created on 2026-02-21 and is hosted on IP address 104.21.52.21, located in the United States and assigned to AS13335 Cloudflare, Inc. VirusTotal reports 10 out of 95 security vendors flagged the domain as malicious, with detections from alphaMountain.ai, BitDefender, CyRadar, ESET, and Fortinet. The site uses SSL certificate type WE1 and is listed on 1 blocklist. GridinSoft trust rating is 0 out of 100, and the domain risk score is 73.

As of this report, the site status is DOWN/OFFLINE, which reduces immediate threat but does not preclude future reactivation. The risk level is assessed as high based on the impersonation of a major brand, multiple vendor detections, and low trust score. Users should avoid any interaction with this domain.