zenviacapitalltd[.]org

The domain zenviacapitalltd.org has been identified as a generic phishing threat, currently under investigation and flagged as active. The site impersonates Zenvia Capital, a legitimate investment firm, to deceive users into disclosing sensitive information or transferring funds. No specific drainer kit has been identified at this time, but the domain's purpose aligns with credential harvesting or financial fraud.

Technical analysis reveals that the domain was registered through Fewmoretaps OU d/b/a Trustname.com and created on April 28, 2026. It resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal reports 0 detections out of 95 engines, indicating that the site has not yet been widely flagged by security vendors. However, it appears on one security blocklist and is present in one threat intelligence pulse on AlienVault OTX, suggesting it has been identified as malicious by some security researchers. The domain's page title is 'Zenvia Capital,' which directly matches the impersonated brand.

As of this writing, the domain remains active and accessible, posing an ongoing risk to users who may encounter it via email, search results, or social engineering campaigns. PhishDestroy recommends that users avoid interacting with this site entirely and report any unsolicited communications referencing Zenvia Capital. Organizations should consider blocking the domain at the network level and monitoring for related phishing indicators. Users who have already engaged with the site should change passwords and monitor financial accounts for suspicious activity.