xcvdt[.]pics

xcvdt.pics is a newly registered domain observed in a generic_phishing campaign. The WHOIS record shows registration through Spaceship, Inc. on July 9, 2026, with authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points exclusively to the IPv4 address 47.242.217.10, which remains active as of the report date. The domain is currently classified with a risk level of under_investigation and retains an active status. No additional infrastructure such as additional IPs, ASN information, or hosting details has been disclosed. The limited intelligence indicates that the domain is being used as part of a phishing operation, but the specific target brand, malicious payload, or phishing kit has not been publicly identified. Consequently, the scope of the campaign, including the volume of emails or the geographic distribution of victims, remains uncertain. Defenders should consider adding the domain and its resolving IP to blocklists, monitoring DNS queries for repeated lookups, and employing heuristic detection to capture potential phishing emails that reference this domain. Ongoing collection of passive DNS, sinkhole, and email telemetry is recommended to refine attribution and to determine whether additional infrastructure is linked to the campaign.