rtredfghb[.]pics

The domain rtredfghb.pics was registered on April 12 2026 through Spaceship, Inc. and is currently resolved to the IPv4 address 47.242.217.10. The authoritative name servers are launch1.spaceship.net and launch2.spaceship.net, indicating the registrar’s default DNS configuration. The domain is listed on a single public security blocklist and has been actively blocked by the PhishDestroy feed, confirming that threat‑intelligence sources have observed malicious activity associated with it. VirusTotal analysis shows that six of ninety‑one scanning engines have generated a detection, reinforcing the suspicion of malicious use. The threat type is classified as generic phishing and the operational status remains active as of the report date, July 28 2026.

Infrastructure analysis reveals no additional hosting indicators beyond the single IP address; no autonomous system number or geographic attribution is provided in the source data. The lack of SSL/TLS information suggests that the site may be operating without HTTPS, a common characteristic of phishing infrastructures that rely on rapid deployment rather than credential protection. No Safe Browsing, OTX, or other reputation services are referenced, and no page title or content details have been disclosed, leaving the visual lure and credential‑capture mechanisms unverified. Defenders should prioritize adding rtredfghb.pics to inbound and outbound filtering policies, especially in environments that enforce URL or domain reputation controls.

Correlation of the IP address 47.242.217.10 with existing network logs can help uncover any prior contact attempts. Because the domain is already flagged by PhishDestroy and has multiple vendor detections, security products that ingest blocklist feeds will likely block it automatically; however, manual rule insertion is recommended for legacy systems lacking real‑time feed integration.