Analysis of the domain cinenso.sbs indicates that it is currently active and associated with a generic phishing campaign. The domain was registered through Dynadot Inc on July 27, 2026 and resolves to the IP address 188.114.96.3. DNS resolution is served by the Cloudflare nameservers gracie.ns.cloudflare.com and harlan.ns.cloudflare.com.
The domain appears on a single security blocklist and has been blocked by the PhishDestroy mitigation service, confirming that at least one external sinkhole has identified it as malicious. VirusTotal reports that the domain was scanned by 91 antivirus and URL‑reputation vendors, none of which returned a detection at the time of the scan; this lack of detections does not constitute evidence of benign behavior. No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange reports, SSL certificate details, HTTP response codes, or page title information is presently available for cinenso.sbs.
Consequently, the absence of these data points creates uncertainty regarding the site’s content, hosting infrastructure beyond the disclosed IP, and any potential payloads delivered to victims. Defenders should continue to enforce blocking of the domain at network perimeter devices and DNS resolvers, monitor outbound traffic for connections to 188.114.96.3, and consider adding the domain to internal blocklists. Ongoing observation of threat‑intel feeds for new detections, changes in blocklist status, or emergence of additional indicators is recommended to refine the risk assessment as more information becomes available.