hmtclient365[.]webcindario[.]com

Analysis indicates that hmtclient365.webcindario.com is currently listed on at least one security blocklist and has been actively blocked by PhishDestroy. The domain was registered on February 28, 2001 through the registrar TUCOWS.COM, CO., and is hosted on the IP address 5.57.226.202. DNS resolution uses Google Domains name servers (ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, ns-cloud-d3.googledo). VirusTotal scans have returned detections from 10 of 91 security vendors, confirming malicious classification. The domain is flagged as a generic phishing site and remains active as of the report date, July 27, 2026.

Infrastructure analysis reveals no public SSL certificate information, HTTP response codes, or page title data, indicating that those indicators have not been published or were not captured at the time of assessment. Absence of Safe Browsing or OTX entries in the available intelligence does not imply safety; rather, the existing blocklist entry and vendor detections provide sufficient evidence of threat. The combination of an old registration date, use of widely available Google Cloud name servers, and a single IP address suggests a low‑cost hosting setup typical of phishing campaigns. Defenders should immediately add 5.57.226.202 to network deny lists and enforce DNS filtering for hmtclient365.webcindario.com. Monitoring of outbound traffic for connections to this IP and associated name servers is recommended.

Given the active blocklist status, intrusion‑prevention systems should be updated to block any HTTP or HTTPS requests to the domain. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in vendor detection rates. Organizations that employ email filtering should include the domain in their phishing‑mail rulesets to reduce user exposure. Until further content analysis is available, the domain should be treated as a high‑risk phishing indicator.