synapfintec[.]com

The domain synapfintec.com was registered on March 11, 2026 through Global Domain Group LLC and resolves to the IPv4 address 192.142.54.88, which is assigned to the Dutch ASN 214036 (Ultahost, Inc.). The hosting provider supplies LiteSpeed web server software and the site was served over HTTPS using a Let’s Encrypt R12 certificate. The page title observed during the brief scan was "Synapfintech - ICO", indicating a possible cryptocurrency‑related lure, although the content of the landing page has not been disclosed. Technical fingerprints show the presence of Bootstrap, Slick, jQuery, and HTTP/3 support, suggesting a relatively modern web stack.

DNS resolution is handled by dns5.fimgohost.com and dns6.fimgohost.com, and the MX record points to the domain itself, a configuration commonly used by phishing operators to receive victim replies. VirusTotal analysis recorded two detections out of ninety‑five security vendors, confirming that at least a minority of scanning engines flag the domain as malicious. The domain appears on a single public blocklist and has been added to the PhishDestroy blocklist, indicating that at least one anti‑phishing consortium has taken action against it. Current operational status is offline, which may be temporary or a takedown.

Defenders should continue to block the domain and its associated IP address at perimeter firewalls, DNS resolvers, and endpoint filters. Monitoring for re‑registration of the domain or reuse of the IP range by similar campaigns is advised, as the infrastructure (ASN, hosting provider, and certificate authority) is reusable. Organizations that have previously received communications referencing ICO investments should treat any emails referencing synapfintec.com as suspicious and enforce standard phishing mitigation controls, including user education, email authentication checks, and sandbox analysis of any attached artifacts.