dahsboard-reya[.]com

Analysis of the domain dahsboard-reya.com indicates a recent brand‑impersonation campaign targeting the generic “across” brand. The domain was registered on 7 October 2025 through CNOBIN INFORMATION TECHNOLOGY LIMITED and delegated to the virtualine.org name servers (ns1.virtualine.org, ns2.virtualine.org). DNS resolution points to the IPv4 address 91.92.241.15, which is registered to AS202412 Omegatech LTD in the Netherlands. No TLS certificate is presented, meaning the site was served over plain HTTP.

The page title retrieved during the brief live window reads “Reya Community | Explore French Forests & Wilderness Campaigns,” which does not directly reference the impersonated brand, and the site is currently taken offline. Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating a highly malicious assessment. VirusTotal scans flagged the domain in 7 of 95 antivirus engines, and the domain is listed on one public security blocklist. PhishDestroy also reports the domain as blocked.

The combination of low trust score, multiple vendor detections, and blocklist presence suggests the domain was actively used for malicious purposes before being taken down. Uncertainty remains regarding the exact phishing workflow, the presence of credential‑stealing forms, or any payload delivery, because the site is no longer reachable and no detailed page content has been captured. Defenders should continue to block the IP address 91.92.241.15 and the domain name at DNS and proxy layers, monitor for any resurgence of the same name servers or registrar activity, and update URL filtering policies to include the observed host. Incident response teams encountering traffic to this host should treat it as malicious and isolate affected endpoints for forensic analysis.