bpkin[.]art

The domain bpkin.art has been identified as a high-risk phishing site engaging in brand impersonation of Google. This sophisticated scam was designed to harvest user credentials by mimicking the legitimate Google sign-in page, complete with a convincing “Sign in – Google Accounts” title. PhishDestroy’s analysis confirms that this domain posed a direct threat to Google account holders, luring victims with a fake authentication portal.

Technical indicators paint a clear picture of the threat. VirusTotal flagged the domain with an alarming 12 out of 95 security vendors, while Google Safe Browsing explicitly labeled it as phishing. The domain, created on May 18, 2026, was registered through NameSilo, LLC and resolved to IP address 35.200.51.10. Its SSL certificate was issued by Let’s Encrypt (R13), and the site appeared on one security blocklist. These data points confirm the domain’s malicious intent and infrastructure.

Currently, bpkin.art is offline, likely due to takedown actions. However, users who may have visited the site should remain vigilant. PhishDestroy recommends changing Google passwords immediately if credentials were entered on this domain, enabling two-factor authentication, and monitoring accounts for suspicious activity. While the immediate threat is neutralized, similar phishing campaigns may emerge, so caution is advised when encountering unsolicited login prompts.