dn84[.]biz

PhishDestroy identifies dn84.biz as an active brand impersonation phishing domain targeting unsuspecting users. This domain exhibits clear indicators of credential theft activity and remains in an active state at the time of analysis. Threat intelligence sources confirm ongoing malicious operations associated with this infrastructure.

The domain dn84.biz was registered on October 16, 2023 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 91.206.71.24. It holds an SSL certificate issued by Google Trust Services, which may contribute to initial trust perception among potential victims. As of the latest scan, dn84.biz remains undetected by 5 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious by security platforms.

Based on available intelligence, the risk level for dn84.biz remains under investigation pending further behavioral analysis. Users are strongly advised to exercise extreme caution and avoid any interaction with this domain or its associated infrastructure. Network administrators should consider immediate blocking of dn84.biz at DNS and firewall levels. All organizations are recommended to update threat intelligence feeds and security protocols to include this domain. Enhanced monitoring for credential theft attempts and brand impersonation campaigns is strongly advised during this active investigation period.