benthsontix[.]com

Analysis as of July 24, 2026 indicates that the domain benthsontix.com was registered on February 21, 2026 and is currently taken offline. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal reports that one out of ninety‑three scanning engines flagged the domain, confirming a detection consistent with a social‑media phishing campaign. The intelligence categorises the activity as generic phishing with a specific focus on social‑media credential harvesting.

The elevated risk rating reflects the potential for credential theft and account compromise if the site were to become active. No additional technical artifacts such as IP address, hosting provider, SSL certificate details, or page title have been disclosed in the available data, so the broader infrastructure remains unknown. Defenders should continue to enforce blocklist rules that include benthsontix.com, monitor DNS queries for any resolution attempts, and consider adding the domain to internal denial‑of‑service or sinkhole controls.

Because the site is offline, immediate exploitation risk is low, but the presence on a blocklist and the single vendor detection suggest that threat actors have previously used this domain in phishing kits. Continuous re‑evaluation is advised in case the domain is re‑registered or the hosting environment changes. Organizations that employ social‑media authentication flows should educate users about unsolicited login prompts and verify URLs before entering credentials.