cxvdf345f[.]pics

Analysis of cxvdf345f.pics shows the domain was registered on July 18 2026 through Spaceship, Inc. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which remains active as of the report date (July 28 2026). The domain is currently listed on one public security blocklist and has been added to the PhishDestroy blocklist. VirusTotal scans indicate that 1 of 91 security vendors flagged the domain as malicious, reinforcing the suspicion of phishing activity.

No additional public reputation services (e.g., Google Safe Browsing, OTX) have published indicators for this host, and no SSL certificate details or HTTP response codes are available in the current intelligence set. The limited detection footprint suggests a recent deployment, consistent with the creation date only ten days prior to the report. Defenders should proactively block or sinkhole the IP address 47.242.217.10 and add cxvdf345f.pics to internal deny lists.

Monitoring of the registrar Spaceship, Inc. for future domain registrations is advised, as well as periodic re‑query of VirusTotal and blocklist feeds for any change in detection count. Because the site’s content and target brand have not been disclosed, further passive and active probing (e.g., safe‑browse request, TLS handshake) is recommended to confirm the phishing payload and to enrich detection signatures. Until more detailed indicators are observed, the domain should be treated as high‑risk and prevented from reaching end‑users.