247signal[.]com

The domain 247signal.com was registered on February 21, 2026 and is currently offline. DNS resolution points to the IPv4 address 163.61.188.2, which belongs to the United States and is announced by AS153568 NEW DHAKA HARDWARE. The site presented a TLS certificate identified as WE1, indicating that HTTPS was in use before the takedown. VirusTotal analysis shows that two of ninety-three security vendors flagged the domain, suggesting the presence of malicious content despite a low detection ratio.

The domain appears on a single external blocklist and has been specifically blocked by PhishDestroy, reinforcing the view that it is associated with abusive activity. The page title retrieved from the site, "24/7signal-Trade – Safe investment with 24/7signal-Trade," references a purported investment service, yet the intelligence categorises the campaign as a tech‑support scam that impersonates Google. This mismatch between the advertised service and the declared scam type underscores the need for further forensic examination of any cached content.

Defenders should update URL filtering and domain reputation feeds to include 247signal.com, monitor for any re‑registration attempts, and enforce strict outbound traffic controls to the associated IP range. Network sensors should be tuned to alert on TLS handshakes to the WE1 certificate fingerprint, and endpoint protection solutions should consider the two vendor detections as an indicator of compromise when encountering related binaries or scripts. Continuous review of threat‑intel feeds for new sightings will help mitigate the risk of resurgence, especially given the brand‑targeted nature of the operation.