cxv435f[.]pics

The domain cxv435f.pics was registered on July 23 2026 through Spaceship, Inc. and is served by the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 47.242.217.10, which is currently reachable and associated with a single security blocklist entry. The site has been tagged by the PhishDestroy feed as a generic phishing infrastructure, and five of ninety‑one VirusTotal scanners have raised detections against the host, indicating that at least a minority of commercial engines consider the domain malicious.

No additional public intelligence such as Safe Browsing, OTX, or SSL certificate details is available in the current feed, and the page title and landing‑page content have not been harvested, leaving the exact luring technique undocumented. The limited age of the domain—only five days old at the time of this report—combined with the rapid appearance on a blocklist suggests an opportunistic campaign that relies on short‑lived URLs to avoid reputation buildup.

Defenders should prioritize DNS‑level blocking of cxv435f.pics and any sub‑domains, enforce outbound filtering for connections to the resolved IP address 47.242.217.10, and monitor traffic for anomalous HTTP requests to the domain. Given the active status and the existing vendor detections, adding the host to internal threat‑intel feeds and correlating future log entries against this indicator will improve detection of any ongoing phishing attempts that leverage the same infrastructure.