natsupport[.]net

Analysis of natsupport.net indicates that the domain is actively being used for malicious activity classified as generic phishing. The domain was created on June 12, 2026, and it resolves to the IPv4 address 172.237.133.182. VirusTotal records show that 17 of 91 security vendors have flagged the domain, suggesting a consensus among multiple detection engines that the site hosts phishing content.

The domain is currently listed on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the perception of risk. The threat rating is elevated and the operational status is marked as active, meaning the phishing infrastructure is likely still reachable. At this time, no additional technical details such as SSL certificate information, HTTP response codes, or page title content have been published, leaving those aspects unverified.

Defenders should prioritize adding natsupport.net to network deny lists, enforce DNS sinkholing where possible, and monitor outbound connections to the associated IP address. Continuous re‑scanning with multi‑vendor platforms is advised to capture any changes in detection scores, and threat‑intel feeds should be consulted for any emerging indicators that could expand the observable footprint of this phishing campaign.