davi-enlineaa[.]webcindario[.]com

Analysis of davi-enlineaa.webcindario.com shows that the domain is registered through Tucows Domains Inc. and was created on 28 February 2001. The domain resolves to the IPv4 address 5.57.226.202 and is served by Google Cloud DNS name servers ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, and ns-cloud-d3.googledo. The infrastructure is listed on one public security blocklist and is actively blocked by the PhishDestroy feed, indicating that defenders have observed malicious activity originating from this host. VirusTotal reports that three of ninety‑one scanning engines flag the domain, confirming that a minority of anti‑malware products have identified it as suspicious.

The threat type is classified as generic phishing, and the risk level is high. The domain remains active as of the report date, 27 July 2026, and no public indication of takedown has been observed. Evidence is limited to registration metadata, DNS resolution, blocklist presence, and the partial VirusTotal detection count. No information is available regarding TLS certificates, HTTP response codes, page titles, or content snapshots, so the exact phishing payload cannot be confirmed.

Analysts should continue to monitor DNS queries for the listed name servers, enforce blocklist rules for the IP address 5.57.226.202, and consider adding the domain to internal deny lists. Network sensors should flag outbound connections to this host, and email gateways should treat any messages containing URLs that resolve to this domain as high‑confidence phishing attempts. Further investigation, such as sandboxing of retrieved content, is recommended to determine the specific lures or credential‑harvesting techniques employed.