portal-pedagio[.]dynv6[.]net

Analysis of portal-pedagio.dynv6.net indicates an active generic phishing infrastructure with an elevated risk rating as of the report date, July 29, 2026. The domain was created on October 24, 2014 and is registered through Hetzner Online GmbH, a provider known for offering flexible hosting services. DNS resolution points to the IPv4 address 165.154.235.128, and the authoritative name servers are ns1.dynv6.com, ns2.dynv6.net, and ns3.dynv6.net.

VirusTotal has recorded 16 detections out of 91 security vendors, suggesting that a substantial subset of scanning engines have identified malicious characteristics associated with the domain. The site is listed on one security blocklist and has been actively blocked by the PhishDestroy threat‑intelligence feed, reinforcing the view that it is being leveraged for phishing campaigns. No public evidence of SSL/TLS configuration, HTTP response codes, or page title has been disclosed, so the current page content remains unverified.

The combination of multi‑vendor detections, blocklist presence, and hosting under a reputable provider yet used for illicit activity underscores the need for defensive operators to enforce network‑level blocking of both the domain and its resolved IP address. Security teams should also monitor related subdomains under the dynv6.net namespace and consider adding the host to intrusion detection signatures. Continuous re‑evaluation is advised, as future changes to the site’s content or additional detections could modify the threat posture.