cxvb325d[.]pics

Analysis of cxvb325d.pics indicates an active generic phishing campaign as of the report date, July 28, 2026. The domain was registered on July 18, 2026 through Spaceship, Inc., and is served by the authoritative nameservers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the single IPv4 address 47.242.217.10, which constitutes the sole public hosting endpoint observed for this indicator. The domain is listed on one security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one mitigation platform has identified it as malicious.

A VirusTotal scan conducted by 91 antivirus and URL‑reputation vendors returned no detections; while this demonstrates a lack of current signatures, the absence of detections does not constitute proof of safety and should be interpreted as inconclusive. No additional observations are available for Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, trust‑score services, page title, or evidence links. Consequently, the observable evidence is limited to registration metadata, DNS infrastructure, blocklist status, and the VirusTotal scan result.

Defenders should treat the domain as hostile, incorporate the IP address 47.242.217.10 into network‑level deny lists, and ensure that existing phishing‑filtering solutions block cxvb325d.pics. Continuous monitoring of the IP and periodic rescans with VirusTotal or comparable services are recommended to detect any emergence of detections. Given the lack of public content analysis, further investigation of the landing page, if accessed in a controlled environment, would be required to characterize the specific phishing payload and target brand.