centrumdebadde[.]nl

The domain centrumdebadde.nl was registered on April 02, 2026 through Internet Service Europe B.V. and resolves to the IPv4 address 185.87.187.120, which is hosted in the Netherlands by Totaaldomein BV. The authoritative nameservers are een.dnssrv.nl and twee.dnssrv.nl, and the site presents a valid Let's Encrypt certificate (R12). The domain is currently flagged as active with a high risk rating.\n\nWeb traffic to the domain returns an HTTP 302 status code, redirecting visitors to a page whose title reads "Account Suspended." This response suggests the infrastructure is designed to present a legitimate‑looking landing page while masking the underlying malicious delivery mechanism. The presence of a trusted TLS certificate may be intended to increase user confidence and bypass basic security checks.\n\nThreat intelligence sources have repeatedly observed the domain. It appears in nine separate threat‑intel pulses and has been listed on one security blocklist. Seven out of ninety‑five security scanners have flagged the domain as malicious, and Gridinsoft assigns it a trust score of zero out of one hundred, indicating a strong consensus of compromise. The domain is also blocked by the PhishDestroy mitigation service, confirming its use in phishing operations.\n\nDefenders should immediately add centrumdebadde.nl and its resolving IP address 185.87.187.120 to deny‑list rules across perimeter firewalls, DNS filtering, and endpoint protection platforms. Continuous monitoring for newly created domains using the same registrar or nameserver pattern is advisable, as well as inspecting outbound traffic for connections to this IP range. Organizations should educate users about the likelihood of credential‑harvesting pages that masquerade as legitimate account notices, and enforce multi‑factor authentication to mitigate credential exposure should a victim interact with the site.