bvn546fgd[.]pics

Analysis as of July 28 2026 indicates that the newly registered domain bvn546fgd.pics, created on July 25 2026, is actively being used for a generic phishing campaign. The domain is registered through Spaceship, Inc. and is served by the authoritative nameservers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which remains reachable and the domain continues to resolve despite blocklist listings. The infrastructure has been flagged by multiple security services: PhishDestroy has already blocked the domain, and VirusTotal reports that one of ninety‑one scanning engines returned a positive detection.

Additionally, the domain appears on a public security blocklist, confirming that at least one external trust feed considers it malicious. No public information about SSL certificates, HTTP response codes, or page content has been published, so the exact payload and lure techniques remain unknown. Defenders should add 47.242.217.10 and bvn546fgd.pics to network‑level deny lists, enforce DNS sinkholing for the domain, and monitor outbound connections to the associated nameserver IP ranges.

Email security gateways should be updated to block messages containing URLs that resolve to this domain, and any credential‑theft alerts should be correlated with traffic to the IP address. Continuous re‑scanning on VirusTotal and periodic checks of blocklist feeds are recommended to capture any changes in detection status. Organizations that have previously observed similar phishing attempts should review login credential usage and enforce multi‑factor authentication to mitigate potential compromise.