CF Radar
provider verdict: malicious
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
“Verificação de Conta”
Assessment based on the stored source evidence below. Review sources →
centralbeneficiosplus.online — Conteúdo indisponível. Tipo de golpe: Generic Phishing. Resumo das evidências: VirusTotal 0/91; CF Radar malicious; cloaking observed; PhishDestroy score 75/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
provider verdict: malicious
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
5/14
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
checked — no detections recorded
DenunciarEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
no community references
DenunciarCommunity publication references, not a vendor verdict or evidence of a common operator.
relatório armazenado
View stored capture ↗ DenunciarA preserved page image documents what the collector received; a capture is not a safety verdict.
Análise concluída
DenunciarThis is the recorded automated analysis. Completion alone is not a safety verdict.
Checked; no threat flag recorded
DenunciarA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
0 external matches
DetalhesA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Stored narrative · generated . Provider checks below retain their own observation dates.
This domain, centralbeneficiosplus.online, is flagged as a fake rewards portal designed to deceive visitors into disclosing personal and financial information. The site mimics legitimate benefits or loyalty programs, offering non-existent rewards or exclusive deals to trick users into entering sensitive data such as login credentials, credit card details, or social security numbers. Such schemes often lead to identity theft, financial fraud, or unauthorized account access, with victims unaware until after the damage is done. Analysis indicates the domain was registered on July 01, 2026, through Dynadot Inc, a registrar commonly used for both legitimate and malicious domains. As of the latest scan, the domain has zero detections out of 95 security engines on VirusTotal, suggesting it has not yet been widely flagged or may employ evasion techniques to avoid detection. The site resolves to the IP address 69.49.241.129, and its SSL certificate is issued by Let's Encrypt, a free and widely used certificate authority that does not inherently validate the legitimacy of the site's content or intent. If you have visited centralbeneficiosplus.online or entered any information on the site, immediate action is required to mitigate potential risks. First, cease all interaction with the domain and do not respond to any communications claiming to be from the site. Next, change passwords for any accounts that may have been exposed, prioritizing financial, email, and social media platforms. Enable multi-factor authentication where available to add an extra layer of security. Monitor bank and credit card statements for unauthorized transactions, and consider placing a fraud alert or credit freeze with major credit bureaus. Report the incident to relevant cybersecurity authorities or consumer protection agencies to aid in tracking and shutting down the fraudulent operation.
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
These checks have no retained result. This does not mean they passed or that a scan is running.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns1.dyna-ns.netns2.dyna-ns.netLocation describes the IP network.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of centralbeneficiosplus.online · checked Jul 3, 2026
A página exibia uma resposta para um visitante que parecia um navegador e outra para um rastreador ou um verificador de segurança. O cloaking existe apenas para impedir que os avaliadores tenham acesso à página de destino real.
content_divergenceNota do digitalizador: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='centralbeneficiosplus.online', port=80): Max retries exceeded with url: / (Caused by NewCo
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Template-based draft · optional AI wording assistance requires separate consent
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraEnvie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarRelatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMonitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo