bspa-gov[.]com

The domain bspa-gov.com was registered through NameSilo, LLC on August 27, 2023 and is currently taken offline. DNS resolution points to IP address 198.12.93.82, which belongs to HostPapa (AS36352) and is geolocated in the United States. No SSL certificate is presented for the host, indicating that connections are likely unencrypted HTTP. The sole page title retrieved from the site is "BSPA," and no additional page content has been publicly disclosed.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain's legitimacy. VirusTotal analysis shows that one of ninety‑five security vendors flagged the domain, suggesting at least one detection of malicious activity. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, confirming that threat‑intelligence feeds recognize it as a phishing vector. Nameserver information is limited to a single authoritative server, which further constrains attribution.

While the available data confirms the domain’s classification as a generic phishing site, the absence of SSL, limited blocklist presence, and the single vendor detection leave uncertainty regarding the full scope of the phishing campaign, such as the specific lure or credential‑harvesting mechanism employed. Defenders should immediately add bspa-gov.com and its resolving IP 198.12.93.82 to network deny lists, monitor for any residual traffic, and consider extending blocklist rules to encompass associated host ranges. Ongoing observation of threat‑intel feeds for additional detections or related infrastructure is advised to capture any expansion of the campaign.