davivienda-linea[.]webcindario[.]com

The domain davivienda-linea.webcindario.com is flagged as a high‑risk generic phishing site as of July 27, 2026. Registration data shows it was created on February 28, 2001 through Tucows Domains Inc., and it currently resolves to the IP address 5.57.226.202. DNS resolution is handled by Google Cloud DNS servers (ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, ns-cloud-d3.googledo), indicating that the operator is leveraging reputable cloud infrastructure to host the malicious payload.

VirusTotal analysis reports that 2 of 91 security vendors have identified the domain as malicious, providing independent confirmation of its nefarious use. The domain appears on at least one public security blocklist and is explicitly blocked by the PhishDestroy mitigation service, reinforcing its classification as an active threat. No public information on SSL certificate details, HTTP response codes, Safe Browsing status, OTX references, or page title has been disclosed, leaving the exact content and impersonated brand unverified.

Consequently, defenders should treat the domain as hostile: block all outbound and inbound traffic to 5.57.226.202, add the domain to local DNS blacklists, monitor for any DNS queries or HTTP requests targeting the host, and consider ingesting the indicator into threat‑intel platforms. Ongoing surveillance of the associated IP and its hosting environment is advised, as the attacker may pivot to additional subdomains or rotate infrastructure while maintaining the same cloud provider footprint.