Is beneficioexclusivo.s3.us-east-005.backblazeb2.com legit or a scam?
Phishing landing page on Backblaze B2 cloud storage; part of an active scam network using temporary subdomains to harvest credentials.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
Critical risk detected
2 of 92 antivirus engines flag this page. Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
The renderer received an API-level XML access-denied error rather than a rendered webpage; no visual scam indicators can be evaluated from this response.
What our vision model saw
1 signalPage renders a raw XML error response with AccessDenied and 'Unauthenticated requests are not allowed for this api' message — no visual content to assess
MT Intelligence
The URL is a subdomain of Backblaze B2, a legitimate cloud-storage service frequently abused for short-lived phishing campaigns. Our antivirus network flagged it as phishing (G-Data and Gridinsoft). The evidence package documents multiple nearly identical subdomains on the same Backblaze B2 prefix (aprovacoestododia, belimite, aumentolins, template090) all flagged as phishing by security engines and listed in phishing blocklists. The name 'beneficioexclusivo' (exclusive benefit) is a common Spanish/Portuguese phishing lure. The page itself returns an XML access-denied error, consistent with a misconfigured or abandoned landing page. Backblaze maintains a dedicated abuse-report address specifically because their B2 subdomains are heavily exploited for phishing. No legitimate business registration or reviews exist for this subdomain.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for beneficioexclusivo.s3.us-east-005.backblazeb2.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain is a subdomain of Backblaze B2 cloud storage (s3.us-east-005.backblazeb2.com), a legitimate service frequently abused for hosting temporary phishing, scam, and malware landing pages.
- Very similar subdomains on the exact same bucket/prefix (e.g. aprovacoestododia.s3.us-east-005.backblazeb2.com, aumentomais02.s3.us-east-005.backblazeb2.com, belimite.s3.us-east-005.backblazeb2.com) have been flagged as phishing by multiple
- PCRisk scan of nearly identical subdomain reported 5/91 engines flagging it as phishing/suspicious with a 19/100 trust score; noted lack of ranking and disposable cloud hosting as red flags.
- Backblaze maintains a dedicated reportphishing@backblaze.com address specifically because their f00x.backblazeb2.com and S3-style subdomains are heavily used in phishing campaigns.
- No legitimate business website, reviews, or registration tied to "beneficioexclusivo"; the name translates to "exclusive benefit" and is commonly used in Spanish/Portuguese phishing lures promising special offers or loans.
- Domain age of ~3622 days refers to the parent backblazeb2.com; individual object subdomains are typically short-lived and created on demand by users.
- No direct scan or report found for this exact subdomain, but it follows an established pattern of abuse documented across security sandboxes, phishing lists, and user reports.
- PCRisk Scanneropen
"The domain was flagged by 5 out of 91 security engines, with several classifying it as suspicious or phishing-related... Category: Phishing... cloud-hosted subdomains can sometimes be used for disposable landing pages or impersonation attem"
- PhishStats / IPFire Phishing Listsopen
"Multiple similar subdomains on s3.us-east-005.backblazeb2.com listed in phishing blocklists (e.g. belimite.s3.us-east-005.backblazeb2.com, aumentolins.s3.us-east-005.backblazeb2.com, template090.s3.us-east-005.backblazeb2.com)."
- Reddit / Backblaze Forumopen
"I've been receiving scam emails all linking to the exact same *.s3.eu-central-003.backblazeb2.com URL... At one point the Backblaze B2 domain was banned... due to one jackass phishing scammer."
Security research and phishing blocklists document multiple nearly identical subdomains on the same Backblaze B2 prefix (belimite, aumentolins, template090, aprovacoestododia) flagged as phishing by multiple security engines and listed in phishing blocklists. Reddit users report receiving scam emails linking to similar Backblaze B2 URLs, and note that Backblaze B2 domains have been abused so heavily for phishing that the service has been temporarily banned from some networks. PCRisk scans of nearly identical subdomains reported 5+ engines flagging them as phishing/suspicious. No legitimate business registration, reviews, or positive reputation signals exist for 'beneficioexclusivo'.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Server Reputation
Avoid this site
Our automated review flagged enough risk that you should treat this site as unverified.
- Do not interact with beneficioexclusivo.s3.us-east-005.backblazeb2.com
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
- Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
- OpenShare your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review flags beneficioexclusivo.s3.us-east-005.backblazeb2.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
- No — beneficioexclusivo.s3.us-east-005.backblazeb2.com scored 14/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
- Yes. beneficioexclusivo.s3.us-east-005.backblazeb2.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 31 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- beneficioexclusivo.s3.us-east-005.backblazeb2.com is 9.9 years old, registered on 7/13/2016 through Cloudflare, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- 2 out of 92 antivirus engines in our malware network flagged beneficioexclusivo.s3.us-east-005.backblazeb2.com as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.
- No. beneficioexclusivo.s3.us-east-005.backblazeb2.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- beneficioexclusivo.s3.us-east-005.backblazeb2.com resolves to an IP operated by Backblaze Inc in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 13, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around beneficioexclusivo.s3.us-east-005.backblazeb2.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.