brightshoreglobal[.]com

The domain brightshoreglobal.com has been identified as a phishing site primarily engaged in credential theft. The site impersonates Brightshore Global Investment (BGI), a financial institution, to deceive users into revealing sensitive information such as usernames and passwords.

Analysis indicates that the domain resolves to the IP address 37.49.229.75 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu on June 07, 2026. The domain is currently flagged by Gridinsoft with a trust score of 0/100, indicating a high level of suspicion. It has been listed in 4 threat intelligence pulses on AlienVault OTX and appears on 1 security blocklist. The SSL certificate is issued by Let's Encrypt, which is a common practice for phishing sites to appear more legitimate. VirusTotal reports that 5 out of 95 security vendors flag this domain as malicious. The site uses WordPress, MySQL, PHP, LiteSpeed, OWL Carousel, Lightbox, jQuery Migrate, and jQuery, which are typical technologies for a web application but can also be leveraged to create convincing phishing pages.

The domain is currently offline, which suggests that the hosting service or security agencies have taken action to mitigate the threat. However, the offline status does not eliminate the risk entirely, as the domain could be reactivated or used in a different form of attack. Organizations and individuals are advised to update their security policies and block this domain to prevent any potential exposure. Continuous monitoring of similar domains and user education on identifying phishing attempts are recommended to minimize the risk of credential theft.