syntethix-capital[.]com

Analysis of syntethix-capital.com, registered on April 29 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, shows infrastructure consistent with recent phishing campaigns. The domain resolves to 188.114.96.3, a Cloudflare-hosted address served by the nameservers holly.ns.cloudflare.com and tanner.ns.cloudflare.com. Cloudflare hosting is frequently leveraged to hide origin infrastructure, making takedown more difficult. VirusTotal scans reported two detections out of 91 security vendors, indicating that at least a minority of scanners have identified malicious behavior.

The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, confirming that external threat-intelligence feeds consider it malicious. No additional public reputation services (Safe Browsing, OTX, etc.) are referenced in the supplied data, so their assessments are unknown. The lack of publicly available SSL certificate details or HTTP response codes limits further technical profiling, and the page title has not been disclosed, leaving the exact phishing lure uncertain.

Defenders should add syntethix-capital.com to blocklists at the network perimeter and endpoint level, monitor DNS queries for the domain and its associated Cloudflare nameservers, and consider sinkholing the IP address 188.114.96.3. Because the domain is less than three months old, rapid detection and removal are advisable to limit exposure. Ongoing observation of any new detections from additional vendors or changes in the hosting configuration is recommended.