acceso-ya1[.]webcindario[.]com

This domain, acceso-ya1.webcindario.com, is confirmed as a phishing site impersonating Microsoft. Analysis indicates the threat type is brand impersonation, specifically targeting Microsoft login credentials. The page title, 'Iniciar sesión en tu cuenta Microsoft,' mimics legitimate Microsoft account sign-in portals, suggesting an intent to harvest user credentials through deceptive login forms.

Technical indicators reveal the domain was registered on March 07, 2026, through Tucows Domains Inc. It resolves to the IP address 5.57.226.202, located in Spain under AS29119 (AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL). The domain appears on one security blocklist and is flagged by 22 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt (R13), a common tactic to lend false legitimacy to phishing sites. No Google Safe Browsing (GSB) detection is noted in the available data.

As of the latest assessment, acceso-ya1.webcindario.com has been taken offline, likely due to intervention by security entities. However, residual risk remains due to the potential reuse of the infrastructure or registration of similar domains. Organizations are advised to monitor for related indicators, including the IP address 5.57.226.202 and domains registered through the same registrar. Users should be educated on recognizing brand impersonation tactics, particularly those targeting login portals.