web[.]bp-nxpr[.]com

The domain web.bp-nxpr.com was registered on October 21, 2025 through Gname.com Pte. Ltd. and currently resolves to the IPv4 address 198.18.0.233. It is served by the authoritative name servers a7.share-dns.com and b7.share-dns.net and presents a valid TLS certificate issued by Let’s Encrypt (E7). The web server returns HTTP 200 responses and the page title observed is "bitpie - instant mining beta", indicating a crypto‑related lure. The site is classified as a generic phishing campaign with a specific crypto scam focus and is listed as active with a high risk rating. Independent security blocklists, including PhishDestroy and ScamSniffer, have already flagged the domain, and it appears on two additional blocklists. VirusTotal analysis shows that 14 of 95 security vendors have flagged the host, while Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. No further content analysis is available, so the precise tactics employed on the landing page remain unverified. Defenders should immediately add web.bp-nxpr.com to network and endpoint deny lists, enforce TLS inspection to capture any credential or wallet data transmitted, and monitor for any related infrastructure using the observed IP address and name server patterns. Continuous re‑evaluation is advised as additional intelligence becomes available.