supporttele[.]sbs

The domain supporttele.sbs was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently offline. Infrastructure analysis shows the domain resolves to the IPv4 address 5.230.75.32, which belongs to AS12586 GHOSTnet GmbH operating in Germany. The authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, both of which are publicly resolvable. No TLS certificate was observed for the site, indicating that any communication would have occurred over plain HTTP.

VirusTotal scans reported that ten of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of abuse. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy mitigation service. The page title returned by the HTTP response is simply "supporttele.sbs", providing no additional context about the hosted content. The available intelligence classifies the activity as a tech support scam, a common social‑engineering vector that attempts to convince victims that their computer is compromised and requires remote assistance.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms, as the site content has not been captured and the domain is no longer reachable. Defenders should continue to block the domain at perimeter filters, update DNS blacklists with the observed IP and name server pairs, and monitor for any resurgence of the same infrastructure. Organizations should also educate users about unsolicited tech‑support calls and the risks of granting remote access to unknown parties.