bluesupportkund[.]com

bluesupportkund.com was registered on 21 February 2026 and shortly thereafter began serving a malicious payload associated with a tech support scam. The domain resolves to the IPv4 address 31.14.96.72, which belongs to AS20857 operated by Signet B.V. in the Netherlands. HTTP requests to the host return a 404 Not Found page title, indicating that the primary landing page has been removed or never existed. The site’s TLS certificate is identified as version R13, a common indicator of low‑cost or self‑signed certificates often used by illicit operators. Reputation services rate the domain extremely poorly: Gridinsoft assigns a 0/100 score and Scamadviser also reports 0/100, reflecting a lack of trustworthiness.

VirusTotal analysis shows that 13 of 95 scanned security engines have flagged the domain, confirming malicious behavior. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. AlienVault OTX includes the domain in two separate threat‑intelligence pulses, further corroborating its association with fraudulent tech‑support activities. No additional evidence such as a brand impersonated or a specific phishing kit is available in the current dataset.

Defenders should continue to block the IP address 31.14.96.72 and add bluesupportkund.com to domain‑level deny lists. Monitoring of the associated ASN (AS20857) for new registrations or similar abuse patterns is recommended, as is periodic re‑scanning of the domain on VirusTotal or comparable multi‑engine platforms to capture any changes in detection rates. Since the site is currently offline, any residual risk stems from cached URLs or previously distributed malicious emails that reference the domain. Organizations should scrub email archives for references to bluesupportkund.com and educate users about unsolicited tech‑support calls that may reference this domain.