beneficiosparatibdh[.]kesug[.]com

This domain, beneficiosparatibdh.kesug.com, is flagged as a high-risk generic phishing domain with a scam type of Account Takeover. The domain was created on August 19, 2023, and remains active as of the report date. It resolves to IP address 51.77.231.201, hosted in France on AS16276 (OVH SAS). The page title retrieved is "Domain Suspended," indicating the domain may have been taken down by its hosting provider or registrar, though the HTTP status returned is 200, suggesting the server is still responding. The domain is registered through NameCheap, Inc. and uses nameservers ns1.byet.org through ns5.byet.org. Mail exchange records point to mx.kesug.com with priority 5. SSL certificate is issued by ZeroSSL. Security assessments show a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100. VirusTotal reports 11 of 95 security vendors flagging this domain. The domain appears on two blocklists and is specifically blocked by PhishDestroy and PhishingDB. Defenders should treat this domain as actively malicious, likely used for credential harvesting or account takeover attempts. The domain should be added to blocklists and monitored for any new resolver IPs or subdomains. The suspended page title may indicate the site is temporarily offline, but the domain infrastructure remains live and could be repurposed. Email security controls should block any mail originating from this domain's MX host. No further details about the specific phishing kit or target brand are available from the provided intelligence.