promobhd[.]webcindario[.]com

Analysis shows that promobhd.webcindario.com is an active brand‑impersonation domain targeting the Linea brand. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, and PhishDestroy has already blocked the site. VirusTotal records indicate that 19 of 93 security engines flag the domain as malicious. Infrastructure traces place the host at IP 5.57.226.202 in Spain, owned by AS29119 AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL. The domain was registered on February 21 2026 through Tucows Domains Inc. and resolves via Google Cloud DNS nameservers (ns‑cloud‑d1, d2, d3). The web server runs Nginx, serves a valid Let's Encrypt certificate (R13), and returns HTTP 200. Embedded analytics include Google Tag Manager and Google Analytics. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one public blocklist. While the page content has not been examined and the specific phishing kit remains unknown, the combined indicators of social‑engineering labeling, multiple vendor detections, and low trust rating suggest a high‑risk threat. Defenders should block the domain and its IP at network perimeters, add it to internal URL filtering lists, monitor for related sub‑domains, and enforce safe‑browsing policies that reference Google Safe Browsing data. Continuous reconnaissance on the host infrastructure is advised to detect any lateral movement or additional payloads.