bcinvestors[.]live

This domain is flagged as a high-risk generic phishing threat, currently active as of July 27, 2026. The domain bcinvestors.live was registered on September 30, 2025, through Dynadot Inc, a registrar commonly used for low-cost domain registrations. The domain resolves to IP address 50.6.200.60, which hosts the phishing infrastructure. Nameservers are set to ns1.bcinvestors.live and ns2.bcinvestors.live, indicating custom DNS configuration typical of malicious operations.

VirusTotal analysis shows 6 out of 91 security vendors flag this domain as malicious, providing moderate confidence in its threat status. It appears on 1 security blocklist and is specifically blocked by PhishDestroy, indicating prior identification by a phishing-focused threat intelligence source. The exact content of the site has not been analyzed, so the specific brand or page visuals are unknown; however, the threat type is classified as generic phishing, suggesting the domain is used to harvest credentials or sensitive information without targeting a specific brand. Defenders should treat this domain as actively hostile, block all traffic to bcinvestors.live and its associated IP 50.6.200.60, and monitor for related domains registered through Dynadot.

Uncertainties include the specific phishing kit in use and the intended target, but the combination of low detection rates and active status warrants immediate blocking in email gateways and web filters. No evidence of SSL certificate details or HTTP status codes is available in the current intelligence, and the page title remains unobserved. Given the active status and moderate vendor detection, this domain poses a tangible risk to users who may encounter it via phishing emails or malicious links.