bellenini[.]com

Analysis of bellenini.com indicates active generic phishing infrastructure. The domain was registered on July 04, 2023 through NameSilo, LLC and remains active as of the report date. DNS resolution points to the IPv4 address 23.227.38.65, and the domain is served by three authoritative name servers: ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com. VirusTotal scans have flagged the domain, with six of ninety-one security vendors marking it as malicious, reinforcing the suspicion of malicious intent. No additional contextual data, such as page content or targeted brands, is available in the current intelligence set, leaving the exact phishing payload or victim profile unconfirmed. Defenders should block network traffic to and from 23.227.38.65, add bellenini.com to URL filtering and threat intelligence feeds, and monitor for any email or credential harvesting attempts that reference this domain. Ongoing observation is advised to capture any future changes in detection counts or content that could clarify the phishing campaign’s scope.