beninmaritime[.]co

Analysis indicates that beninmaritime.co is currently active and serves a web page titled “Benin Maritime” over HTTPS with a valid Let’s Encrypt certificate (YR2). The domain resolves to IP 45.87.212.244, which is hosted in Germany by M247 Ltd. HTTP requests return status code 200, confirming that the site is reachable. VirusTotal records five detections out of ninety‑one scanned scanners, and AlienVault OTX lists the domain in four separate threat‑intel pulses. The domain is already blocked by the PhishDestroy feed and appears on one external blocklist. These indicators collectively classify the site as a high‑risk generic phishing infrastructure. The precise content of the page has not been publicly disclosed, and no additional infrastructure such as additional IPs or command‑and‑control servers has been observed. Defenders should block DNS resolution and HTTP(S) traffic to 45.87.212.244, monitor for any credential‑theft attempts associated with the “Benin Maritime” title, and update endpoint protection rules to include the five VirusTotal detections. Continuous monitoring of the domain’s status and any new intelligence is advised.