properidad1536[.]webcindario[.]com

The domain properidad1536.webcindario.com was registered on February 21, 2026 through Tucows Domains Inc. and is presently active, returning HTTP 200 responses. Technical fingerprints reveal an Nginx web server complemented by Google Tag Manager and Google Analytics scripts, indicating a typical website stack but offering no indication of legitimate affiliation with the targeted brand. The site is secured with a Let’s Encrypt certificate (R13), which is commonly used by both benign and malicious actors and does not provide assurance of authenticity. Infrastructure analysis shows the domain resolves to IP address 5.57.226.202, which is owned by AS29119 AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL in Spain; the same hosting block is referenced by other abuse reports, suggesting possible reuse for malicious campaigns. The nameservers are Google's cloud DNS set (ns‑cloud‑d1…d3.googledomains.com), a configuration frequently employed to obscure ownership details.

Threat intelligence marks the domain as a high‑risk brand impersonation targeting Linea. Google Safe Browsing classifies the site as a social engineering threat, and the domain appears on at least one public blocklist, with PhishDestroy explicitly listing it as blocked. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of reputation. VirusTotal analysis shows 15 of 95 scanning engines flag the domain, reinforcing the suspicion of malicious intent.

While the page title and content have not been publicly disclosed, the combination of a recent registration date, low trust rating, multiple vendor detections, Safe Browsing alerts, and the explicit claim of impersonating Linea provides a compelling evidence base. Defenders should block traffic to properidad1536.webcindario.com at network perimeters, monitor DNS queries for the associated IP and nameservers, and advise users to avoid any interactions that request personal or financial information under the guise of Linea.