Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@thcservers.com.
The latest stored availability evidence still shows the domain reachable; 14 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
synacorzimbra[.]nl
“synacorzimbra.nl”
synacorzimbra.nl — Não verificado. Resumo das evidências: VirusTotal 19/91 (ADMINUSLabs, alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, Certego); URLQuery 2 alerts; CF Radar malicious; PhishDestroy score 100/100. Registrador: PDR.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain synacorzimbra.nl was registered on February 03, 2026 and is currently listed as active with a high risk rating. It is hosted on the IP address 216.252.238.64 and uses Cloudflare name servers boyd.ns.cloudflare.com and sara.ns.cloudflare.com. The registrar for the domain is identified as PDR Ltd. The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, indicating that known defensive products have already taken mitigation steps.
VirusTotal analysis shows that 19 of 91 security vendors have flagged the domain as malicious, providing independent confirmation of its phishing nature. No additional public intelligence such as SSL certificate details, HTTP response codes, or page titles has been disclosed, leaving those aspects unverified at this time. The combination of recent registration, active hosting, multiple vendor detections, and inclusion on a blocklist suggests a purpose-built phishing infrastructure that is likely targeting users with credential‑ harvesting or account takeover campaigns.
Defenders should immediately add synacorzimbra.nl to network and endpoint deny lists, enforce DNS sink‑holing for the resolved IP, and monitor outbound traffic for connections to the identified Cloudflare name servers. Continuous re‑evaluation is advised, as further threat intelligence may surface regarding the content served by the domain or associated command‑and‑control endpoints.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | synacorzimbra.nl |
malicious | Sinkholed |
| DNS4EU | synacorzimbra.nl |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências e relatórios externos
PD-20260801-6A6F14 Recipient: abuse@thcservers.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo