srcontabilidade[.]pt

The domain srcontabilidade.pt is currently classified as a high‑risk generic phishing site. It was first observed on July 12, 2026 and remains active. The page title returned by the server is "SRCONTABILIDADE : Em Construção", indicating that the site is publicly reachable and returning HTTP 200 responses. Gridinsoft assigns a trust score of 0 / 100, and 14 of 95 security vendors on VirusTotal have flagged the domain as malicious.

Infrastructure analysis shows the domain resolves to the IPv4 address 109.71.45.67, which is hosted in Portugal (AS24768 – ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA). The authoritative name servers are ns1.serv‑ip.com and ns2.serv‑ip.com. The web service runs on Apache HTTP Server and presents a valid Let’s Encrypt certificate (R13). MX records point to the same host, suggesting the domain is also used for email delivery.

The domain appears on two public blocklists and is actively blocked by PhishDestroy and PhishingDB. AlienVault OTX references the domain in fifteen separate threat‑intelligence pulses, reinforcing its reputation as a phishing vector. The domain was registered on 5 January 2015, which indicates a long‑standing registration that may be leveraged to lend credibility to the malicious campaign.

Defenders should immediately block network traffic to 109.71.45.67 and add srcontabilidade.pt to DNS‑based deny lists. Email gateways should reject messages originating from the domain’s MX record or any sub‑domains. Continuous monitoring of the associated IP and name‑server infrastructure is advised, as threat actors may shift hosting or reuse the same AS for future campaigns. Incident response teams should also correlate any user‑reported credentials with this indicator to assess potential compromise.