bcm-opr[.]tech

PhishDestroy first observed bcm-opr.tech on Feb 26, 2026. The captured page title is “Login — BCM Ops Risk”. Stored page analysis classifies the content as credential phishing. Current evidence score: 66/100 (high).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 4 detections among 93 engines: ADMINUSLabs, Google Safebrowsing, Lionic, SOCRadar on Feb 25, 2026 at 00:01 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 8, 2026 at 02:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:15 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:10 UTC; content was unavailable. The recorded creation date for the domain is Feb 24, 2026. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 76.13.61.86 on AS47583 (AS-HOSTINGER Hostinger International Limited, CY). The recorded endpoint location is Paris, FR. The stored server header is nginx/1.24.0 (Ubuntu). DOM analysis on Mar 23, 2026 at 23:11 UTC returned 63/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists E8 as the certificate issuer.

The content indicators and 3 positive source findings support the current credential phishing classification.