cancelar-aq4i[.]webcindario[.]com

The domain cancelar-aq4i.webcindario.com was registered on February 28, 2001 through TUCOWS.COM, CO. Its authoritative name servers are ns-cloud-d1.googledomains.com, ns-cloud-d2.googledomains.com, and ns-cloud-d3.googledo, indicating that DNS is hosted on Google Cloud DNS infrastructure. DNS resolution points to the IPv4 address 5.57.226.202, which remains reachable as of the report date and is the same address observed by multiple security monitoring services. The domain is listed on at least one public blocklist and has been specifically added to the PhishDestroy blocklist, confirming that it is recognized as a phishing resource.

VirusTotal analysis shows that three out of ninety‑one scanning engines have flagged the domain, providing independent confirmation of malicious intent. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is currently available, so the exact content served by the site cannot be described. The lack of public page metadata means defenders cannot rely on content signatures, but the infrastructure indicators alone are sufficient to classify the domain as high‑risk.

Defensive actions should include adding cancelar-aq4i.webcindario.com to network and endpoint block lists, denying outbound connections to 5.57.226.202, and monitoring DNS queries for the associated Google Cloud name servers. Security teams should also update email gateways and web proxies to drop any traffic to this host, and consider sharing the indicator set with threat‑sharing communities to improve collective detection. Continuous re‑evaluation is advised, as the domain remains active and could be used in future phishing campaigns targeting users.