bullprint[.]xyz

Analysis of the domain bullprint.xyz as of 2026-08-04 indicates that it is currently active and associated with a generic phishing campaign. VirusTotal records show that one out of ninety-one scanning engines has generated a detection for the domain, suggesting limited but non-trivial malicious attribution. Independent threat-intelligence feeds have added the domain to a single security blocklist, and the commercial anti-phishing service PhishDestroy reports that the domain is blocked on its network.

No additional public indicators such as registrar information, IP address, autonomous system number, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are provided in the available intelligence, leaving those aspects of the infrastructure unverified. The presence of a detection by a reputable scanning engine, combined with the explicit blocklisting by PhishDestroy, confirms that the domain is being used for malicious purposes. However, the low detection count and limited blocklist coverage imply that the campaign may be in an early stage or employing evasion techniques that reduce its visibility across broader telemetry sources.

Defenders should therefore treat bullprint.xyz as a high-confidence indicator of compromise for any traffic observed, enforce outbound filtering to block connections to the domain, and incorporate the domain into internal blacklists. Continuous monitoring of reputation services for additional detections or blocklist additions is recommended, as further evidence may emerge that clarifies the scale and targeting of the underlying phishing operation.