# www.cardanofoundationdesktop.app — SUSPICIOUS

> CardanoFoundationDesktop.app is impersonating the official Cardano wallet. Flagged by 0 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies the domain www.cardanofoundationdesktop.app as a live fake wallet phishing page targeting Cardano users. This site mimics the Cardano Foundation branding to trick visitors into downloading counterfeit wallet software and surrendering private keys. The page is currently active and remains under real-time monitoring by the PhishDestroy threat intelligence pipeline.


The domain resolves to IP address 216.150.1.65 and is secured with a Let’s Encrypt SSL certificate issued on 2024-05-14. Threat intelligence shows zero detections among 95 VirusTotal scanning engines at the time of analysis. WHOIS records indicate the domain was created on 2024-05-13 and is registered through Namecheap Inc. Current blocklist coverage is 0/64 public blacklists, with a PhishDestroy trust score of 21/100, indicating high risk. The seed hash c36d5a places this sample in cluster 36 targeting Cardano ecosystem users.


Because the fake wallet page is actively hosted and leverages the Cardano Foundation brand, immediate caution is advised. Users should refrain from downloading software from this domain and verify wallet sources only via the official cardano.org website. Security teams are recommended to block the IP 216.150.1.65 and the domain at DNS and perimeter layers. Continuous monitoring of newly registered Cardano-themed domains is advised to prevent further credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 216.150.1.65

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ccbf3c39-541d-4f52-8b58-24844f54da55
- PhishDestroy: https://phishdestroy.io/domain/www.cardanofoundationdesktop.app/
- LLM endpoint: https://phishdestroy.io/domain/www.cardanofoundationdesktop.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.cardanofoundationdesktop.app/
Last updated: 2026-03-22