syb[.]com

The domain syb.com is currently listed as an active generic phishing infrastructure. Registration data shows the domain was created through Network Solutions, LLC, and its authoritative DNS records point to UltraDNS name servers pdns87.ultradns.com and pdns87.ultradns.net. The site has been blocked by the PhishDestroy sinkhole and appears on one external security blocklist, indicating that at least one reputable threat‑sharing feed has identified it as malicious.

HTTP probing returned a 301 redirect response, a pattern commonly observed in phishing campaigns that use temporary landing pages before forwarding victims to the final credential‑harvesting site. VirusTotal analysis records indicate that the domain was scanned by 91 anti‑malware vendors; none of the scanners flagged the domain at the time of analysis, but the absence of detections does not constitute a safety guarantee. The risk level is marked as “under investigation,” and the overall status remains “active,” meaning the infrastructure is still reachable and may be used in ongoing campaigns.

Given the limited public metadata, the primary uncertainties are the specific brand or service being impersonated and the exact payload delivered to victims. Defenders should add syb.com to their blocklists, monitor DNS queries for the listed UltraDNS name servers, and enforce URL filtering that captures HTTP 301 redirects to untrusted domains. Continuous re‑scanning with multi‑vendor services and inclusion in threat‑intel sharing platforms are recommended to detect any future changes in the domain’s behavior or hosting architecture.