blackphoenixbpx[.]org

Analysis of blackphoenixbpx.org shows a newly registered domain created on 10 July 2026 by the registrar Spaceship, Inc. The domain resolves to the IPv4 address 186.2.175.35 and uses the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. VirusTotal reports a single detection out of 91 scanned security vendors, indicating that at least one scanner identified malicious behavior associated with the domain. The domain is currently listed on one external blocklist and has been actively blocked by the PhishDestroy filtering service, confirming that threat‑intelligence feeds consider it a phishing source.

No additional public reputation scores, SSL certificate details, or HTTP response codes are available in the supplied data, leaving the exact payload or landing page content unverified. The limited detection coverage and recent creation date suggest a short‑lived infrastructure typical of opportunistic phishing campaigns. Defenders should immediately add 186.2.175.35 to network‑level deny lists, enforce DNS blocking of blackphoenixbpx.org, and monitor the associated name servers for any future resolution changes.

Continuous re‑scanning of the domain on multi‑vendor services is advised to capture any evolution in detection signatures. Until further forensic evidence is obtained, the domain should be treated as high‑risk and included in email‑gateway and web‑proxy filtering policies.