discord[.]awesome-notifications[.]carda[.]me

Analysis of discord.awesome-notifications.carda.me shows a high‑risk brand‑impersonation campaign targeting Discord users. The domain was registered on March 23 2026 and currently resolves to IP 35.193.97.12, a Google Cloud instance in the US (us‑central1). An HTTP 302 response is returned and the site presents a Let's Encrypt R12 certificate, indicating a valid TLS handshake but offering no legitimacy. Gridinsoft assigns a trust score of 0 / 100, and the domain is listed on a single security blocklist. PhishDestroy has already blocked the host, and 1 of 94 VirusTotal security vendors flagged it as malicious. The page title “Awesome Notifications Open Source” does not correspond to the Discord brand, confirming the impersonation intent. The observed indicators—recent creation, cloud‑hosted IP, low trust score, redirect behavior, and vendor flag—support the classification as an active social‑media phishing site. Defenders should block DNS resolution and HTTP traffic to this domain, monitor for related CNAME or sub‑domain usage, and enforce URL filtering for any references to Discord login flows. Continuous threat‑intel updates are recommended to capture any additional indicators that may emerge.