dtest[.]beta[.]bitstone[.]eu

As of July 25, 2026, the domain dtest.beta.bitstone.eu is flagged as a high-risk, active phishing domain primarily targeting account takeover. The domain is registered through EuroDNS S.A., a reputable registrar, which does not inherently indicate malicious intent but requires further scrutiny in the context of the domain's current activity. Infrastructure analysis reveals that the domain resolves to the IP address 136.243.153.62, which is located in Germany and is part of the ASN24940, managed by Hetzner Online GmbH. This hosting provider is known for its wide range of services, but the association with a high-risk domain suggests that the IP may be compromised or deliberately chosen by the threat actor for its reliability and low suspicion levels.

The domain employs an Apache HTTP Server, a common web server software, which is consistent with typical phishing infrastructure. The SSL certificate is issued by Let's Encrypt, a widely used and trusted certificate authority, which can lend a false sense of security to unsuspecting users. The HTTP status code 302 indicates a temporary redirect, which is often used in phishing attacks to guide victims to a malicious page or to obfuscate the original URL. Gridinsoft's trust score for the domain is 0/100, the lowest possible score, indicating a significant risk of malicious activity.

The domain appears on one security blocklist, specifically PhishDestroy, a notable indicator of its involvement in phishing activities. While the page title 'Account Suspended' suggests that the domain may impersonate a legitimate service's account suspension page, the exact content and targeted brand have not been fully analyzed. Defenders should implement immediate blocking measures and monitor for any related activity. Additionally, users should be warned against visiting the domain and should verify their accounts through official channels only.