webmail[.]sendpicz[.]com

This domain was registered through MarkMonitor Inc., a registrar commonly used by legitimate enterprises, but the registration alone does not confer trust. VirusTotal analysis shows that 15 out of 91 security vendors have flagged the domain as malicious, indicating a moderate consensus among scanners that the site is being used for malicious purposes. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing infrastructure. The authoritative name servers are ns-1115.awsdns-11.org, ns-1570.awsdns-04.co.uk, ns-81.awsdns-10.com, and ns-...

(the fourth entry is truncated in the source). These nameservers belong to Amazon Route 53, suggesting the hosting is on AWS infrastructure, which is a common choice for both legitimate and illicit actors due to its scalability. No public data on the hosting IP address, TLS certificate, or HTTP response codes has been released, and the page title or content has not been captured in the current dataset, leaving the visual or functional characteristics of the site unverified. However, the combination of multiple vendor detections, inclusion on a phishing‑specific blocklist, and active status reported as of July 29 2026 provide sufficient operational evidence for defensive teams to treat webmail.sendpicz.com as a high‑confidence malicious indicator.

Defenders should add the domain to internal blocklists at firewall, DNS resolver, and proxy layers, and enable automated threat‑intelligence feeds that include PhishDestroy to ensure continuous coverage. Monitoring for DNS queries to the listed name servers can reveal additional compromised hosts that resolve to the same infrastructure. If feasible, threat‑hunting teams may query the AWS Route 53 zone for related subdomains or perform passive DNS analysis to uncover historical resolutions.