produ-inici0[.]webcindario[.]com

The domain produ-inici0.webcindario.com has been flagged by 18 out of 95 vendors on VirusTotal for phishing activities. Despite being taken offline, it was actively targeting users, exploiting the reputation of legitimate brands. The domain is registered with Tucows Domains Inc. and hosted on an IP in Spain under the organization AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL.

This domain has also been included in public blocklists such as PhishDestroy and PhishingDB, and it is flagged by Google Safe Browsing. The SSL certificate was issued by Let's Encrypt, which is common for both legitimate and malicious sites due to its ease of access and automation. The platform risk score for this domain is relatively low at 15/100, indicating it might have been part of a broader, less sophisticated phishing campaign.

The early detection by PhishDestroy on December 5, 2025, underscores the importance of timely identification of phishing threats. The domain's registration dates back to 2001, suggesting it might have been repurposed for malicious activities. The swift takedown highlights the effectiveness of coordinated efforts between security vendors and hosting providers to mitigate phishing risks. Despite its offline status, the domain serves as a reminder of the persistent nature of phishing threats and the need for continuous monitoring and rapid response.