com-en-uk[.]support

On 24 July 2026 investigators examined the domain com-en-uk.support, which was registered on 6 March 2026 through Spaceship, Inc. The domain resolves to the Amazon Web Services address 34.216.117.25, ASN 16509, located in the United States. No TLS certificate is presented; HTTP requests return a generic “Parking Page” title. The nameservers launch1.spaceship.net and launch2.spaceship.net are consistent with the registrar’s infrastructure. Threat intelligence categorises the site as a tech-support phishing operation.

VirusTotal scans show that two of ninety-four AV engines flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed it. The domain’s current status is offline, indicating that the hosting content has been removed or the site is otherwise inaccessible. The evidence points to a short-lived infrastructure typical of opportunistic phishing campaigns: a recent registration, use of a cloud provider without SSL, and rapid blocklist inclusion.

Because the domain is already taken offline, immediate mitigation actions focus on ensuring that existing blocklists remain active and that any residual DNS or IP-based indicators are added to local deny lists. Continuous monitoring of the 34.216.117.25 address and the associated nameservers is recommended, as the attacker may repurpose the same resources for future campaigns. Defenders should also watch for new domains registered through Spaceship, Inc. that share the same naming pattern, as this registrar has been used in related incidents.