bwaps[.]site

The domain bwaps.site was registered on June 03, 2026 through Dynadot Inc and is currently active. DNS resolution points to the IPv4 address 51.89.157.40, hosted on nameservers dns24.geebyteserver.com and dns25.geebyteserver.com. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, indicating that at least one reputable anti‑phishing service has identified it as malicious.

VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of those engines reported a detection at the time of analysis, but the absence of detections does not imply safety, especially given the blocklist entry. No public page title, SSL certificate details, HTTP status code, Safe Browsing verdict, or Open Threat Exchange (OTX) indicators are currently available, leaving the surface‑web content unverified. The limited intelligence suggests a classic phishing infrastructure: a newly created domain, a disposable registrar, and a shared hosting IP that is often reused for malicious campaigns.

Uncertainty remains around the specific lure or credential‑harvesting page, as no content analysis has been published. Defenders should treat bwaps.site as hostile: block the domain at perimeter firewalls, DNS resolvers, and proxy filters; monitor outbound connections to the associated IP address; incorporate the domain and its nameservers into threat‑intel feeds; and continue periodic re‑scans to capture any emerging payloads or page changes. Continuous observation is advised until the investigation confirms the full scope of the phishing operation.