beninmaritime[.]in

Analysis of the domain beninmaritime.in indicates it is actively engaged in credential-harvesting phishing targeting maritime agencies or port authorities. Registered through GoDaddy on an unspecified date, the domain resolves to IP address 118.139.179.219, hosted on GoDaddy infrastructure in Singapore. As of July 19, 2026, the site remains operational, returning an HTTP 200 status code, and is flagged by one security blocklist, including PhishDestroy. Five of 91 security vendors on VirusTotal have detected malicious activity associated with this domain, while AlienVault OTX lists it in four threat intelligence pulses, suggesting recurring use in phishing campaigns. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, a common certificate provider for both legitimate and malicious domains. Nameservers ns55.domaincontrol.com and ns56.domaincontrol.com are consistent with GoDaddy’s default configuration, offering no immediate indicators of compromise beyond the domain’s known malicious classification. No specific phishing kit or targeted brand has been confirmed in available data, though the domain name implies impersonation of a Beninese maritime or port authority. Defenders should treat this domain as high-risk infrastructure. Recommended actions include blocking resolution at DNS or firewall level, monitoring for connections to 118.139.179.219, and reviewing logs for credential submission attempts originating from internal networks. Further analysis of the site’s content may clarify the exact phishing lure or targeted entity.