filecedarcanvas[.]com

Analysis indicates that filecedarcanvas.com was registered on June 05, 2026 through Dynadot Inc. The domain uses Cloudflare nameservers ethan.ns.cloudflare.com and walk.ns.cloudflare.com and resolves to the IP address 104.21.8.51, which is part of Cloudflare's edge network. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, confirming that at least one anti‑phishing feed has classified it as malicious. VirusTotal records show that the site has been examined by 91 scanning engines; none of the engines reported a detection at the time of the scan, but the absence of detections does not guarantee that the site is benign.

No additional public intelligence sources such as Google Safe Browsing, OTX, or other reputation feeds have published indicators for this domain, and no SSL certificate details or HTTP response codes are currently available in the provided data. The short age of the domain (approximately two months) and the use of a reputable hosting provider are consistent with typical phishing infrastructure that leverages fast‑changing domains to evade long‑term reputation. Defenders should continue to monitor the domain, enforce existing blocklist rules, and consider adding the domain to local deny lists.

Network sensors should flag any outbound connections to 104.21.8.51 that originate from internal users, especially if the traffic involves credential submission or file download attempts. Because the page content and brand targeting have not been disclosed, the precise phishing lure remains unknown, and further sandbox or URL‑fetch analysis is recommended to capture the payload and any credential‑harvesting forms. Until additional evidence is gathered, the domain should be treated as malicious and blocked at perimeter and endpoint layers.