app-beneficios[.]dynv6[.]net
“app-beneficios.dynv6.net”
app-beneficios.dynv6.net — Konten tidak tersedia. Ringkasan bukti: VirusTotal 12/93 (alphaMountain.ai, BitDefender, Certego, CRDF, CyRadar); URLQuery 2 alerts; CF Radar malicious; PhishDestroy score 86/100. Registrar: Hetzner Online.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis indicates that the domain app-beneficios.dynv6.net was registered on 21 February 2026 through Hetzner Online GmbH and is hosted on an Amazon Web Services EC2 instance in the US (us‑east‑2) at IP address 18.216.152.225. The domain resolves to this IP and relies on the dynv6.net name‑server set (ns1.dynv6.com, ns2.dynv6.net, ns3.dynv6.net). A simple HTTP request returns a page title that matches the domain name, and no additional content has been captured, suggesting the site was intended solely for credential harvesting.
The infrastructure has been listed on a single public blocklist, PhishDestroy, and the domain is currently taken offline. VirusTotal analysis shows that 12 of 93 security scanners flagged the domain as malicious, including both commercial and open‑source engines, reinforcing the suspicion of phishing use. No SSL certificate details, Safe Browsing verdicts, or Open Threat Exchange references were observed in the available intelligence.
The combination of a recent registration date, rapid blocklist inclusion, and multiple vendor detections points to a short‑lived phishing campaign that was quickly dismantled. Defenders should continue to monitor DNS resolutions for the IP address 18.216.152.225 and the associated dynv6.net name‑servers, add the domain to internal blocklists, and update web‑filtering rules to deny traffic to any sub‑domains of dynv6.net that resolve to the same AWS region. Because the site is already offline, immediate mitigation focuses on preventing reuse of the same hosting resources by related campaigns and ensuring that any residual references in email or malicious URL feeds are blocked.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive