portalsegurity26[.]webcindario[.]com
portalsegurity26.webcindario.com — Non vérifié. Type d'arnaque : Credential Phishing. Résumé des preuves: VirusTotal 12/93 (ADMINUSLabs, BitDefender, DNS8, ESET, G-Data); CF Radar malicious; PhishDestroy score 88/100. Bureau d’enregistrement: Tucows.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
This domain, portalsegurity26.webcindario.com, was registered on 2026-03-03 through Tucows Domains Inc. and remains active as of the report date. The registration is recent, and the domain is hosted on the free sub‑hosting service webcindario.com, which is commonly abused for credential‑stealing pages. The domain resolves to the IPv4 address 5.57.226.202, which belongs to AS29119 AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL located in Spain. The authoritative name servers are ns‑cloud‑d1.googledomains.com, ns‑cloud‑d2.googledomains.com, and ns‑cloud‑d3.googledomains.com, indicating use of Google Cloud DNS infrastructure.
The web server identified on the host is Nginx, and the site serves a valid Let’s Encrypt certificate (R13) over HTTPS. Page loads return HTTP 200, and embedded tracking tags reveal Google Tag Manager and Google Analytics, which are typical of sites that seek to mimic legitimate portals. The low Gridinsoft trust score of 0 out of 100 further underscores the malicious nature of the host.
VirusTotal reports that 12 out of 95 scanned security vendors flag the domain as malicious, and the domain appears on at least one public blocklist. PhishDestroy has already added the domain to its blocklist, and the overall risk rating is classified as high. These signals collectively indicate that the domain is being used for generic phishing campaigns designed to harvest user credentials.
Content served by the site has not been captured in the available intelligence, so the exact lure and targeted brand cannot be confirmed. Defenders should therefore treat any traffic to this domain as hostile. Recommended actions include adding the domain and its resolving IP address to network‑level deny lists, updating email and web filtering rules to block the host, and monitoring for any related DNS queries. Continuous re‑assessment is advised, as the operators may shift hosting or alter the payload in future iterations.
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: webcindario.com
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain webcindario.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 3 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comAnalyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of portalsegurity26.webcindario.com · checked Mar 4, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif