yftul[.]pics

Analysis indicates that the domain yftul.pics was registered on June 05, 2026 through Spaceship, Inc. and is currently active, resolving to the IPv4 address 47.242.217.10. The domain is configured with the authoritative name servers launch1.spaceship.net and launch2.spaceship.net, both of which are consistent with the registrar’s infrastructure. Reputation data shows that yftul.pics appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one trusted anti‑phishing feed has identified the domain as malicious.

VirusTotal scanning results reveal that nine out of ninety‑one security vendors have flagged the domain, providing additional independent confirmation of suspicious activity. The available intelligence does not include details on SSL/TLS configuration, HTTP response codes, Safe Browsing status, or any observed page content, leaving the visual or functional characteristics of the site unverified. Consequently, while the domain’s registration, hosting, and detection footprint collectively suggest a high‑risk phishing operation, the absence of payload‑level evidence prevents a more granular classification of the specific lure or credential‑harvesting technique employed.

Defenders should prioritize immediate containment actions: add yftul.pics and its resolving IP address 47.242.217.10 to network deny lists, ensure that email filters reference the blocklist entry, and monitor for any future detections from additional security vendors. Ongoing surveillance of the domain’s DNS records and any changes to its hosting environment is advised, as the active status indicates the potential for continued malicious use.