sonhosrealizados-3[.]dynv6[.]net

Analysis of sonhosrealizados-3.dynv6.net indicates an elevated-risk phishing domain, currently offline as of July 23, 2026. The domain resolves to IP address 192.166.82.88, hosted on AS207847 (CloudBlast LLC) in the United States. Infrastructure is provided via dynv6.net dynamic DNS nameservers ns1.dynv6.com, ns2.dynv6.com, and ns3.dynv6.com. No SSL certificate is present, increasing susceptibility to interception or tampering during transmission. The domain was flagged by 11 of 93 security vendors on VirusTotal, suggesting detection of malicious or suspicious behavior.

It appears on one security blocklist and is blocked by PhishDestroy. The observed page title 'Index of /' indicates an exposed directory listing, a common misconfiguration that may reveal sensitive files or serve as a staging point for phishing payloads. Gridinsoft assigned a trust score of 0/100, reflecting high risk based on infrastructure and detection patterns. No specific brand, phishing kit, or targeted scam type is identified in available data.

The exact content hosted on the domain remains unanalyzed; however, the combination of dynamic DNS, lack of encryption, and directory exposure aligns with known phishing infrastructure. Defenders should treat this domain as compromised and apply blocklist entries at network and endpoint levels. Monitor for re-emergence under the same or related subdomains within the dynv6.net namespace. Further investigation into hosting provider abuse contacts may assist in infrastructure takedown efforts.