sinorandacao[.]net

Analysis of sinorandacao.net indicates the domain is being used for a credential‑harvesting phishing operation. The domain was registered on 22 June 2026 through Dynadot Inc. and is hosted on the Cloudflare network, as evidenced by the authoritative nameservers drew.ns.cloudflare.com and grace.ns.cloudflare.com. DNS resolution points to IP address 104.21.78.129, which is associated with Cloudflare’s edge infrastructure. The domain remains active as of the report date 23 July 2026.

VirusTotal records show that the domain has been scanned by 95 security vendors, yet none have generated a detection. While the absence of detections does not confirm safety, it indicates that automated signatures have not yet identified malicious payloads linked to this host. The domain is listed on one public security blocklist and is actively blocked by the PhishDestroy service, suggesting that threat‑intel feeds have flagged it as malicious. No public information about the site’s SSL certificate, HTTP response codes, page title, or content has been released, so the exact appearance and targeted brand remain unknown.

Consequently, the confidence in the phishing classification derives primarily from the blocklist entry and the recent registration pattern typical of fast‑flux or throwaway domains used in credential‑stealing campaigns. Defenders should add sinorandacao.net to network‑level deny lists, enforce DNS sink‑holing for the resolved IP, and monitor for outbound connections to Cloudflare edge nodes that resolve to the same address. Continuous re‑scanning with multi‑vendor services is advised, as future updates may reveal signatures or behavioural indicators. Organizations that rely on email or web gateways should ensure that URL filtering rules include this domain to prevent end‑user exposure.