cwardin[.]net
Résumé des preuves
This report documents the infrastructure observed for www.cwardin.net as of 24 July 2026. The domain resolves to the IPv4 address 1.2.3.4, which is geolocated to Australia. Hosting is provided through Cloudflare, as indicated by the authoritative nameservers fonzie.ns.cloudflare.com and vita.ns.cloudflare.com. Registration was performed via NameSilo, LLC on 27 February 2026. No TLS certificate is present for the domain, meaning HTTPS connections are not available.
The site has been taken offline, and its current HTTP status is unavailable. Defensive feeds have already taken action: the domain is listed on one security blocklist and has been blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that one of ninety‑four scanning engines flagged the domain, suggesting at least one detection of malicious behavior. Because the site is offline, no page title, brand target, or phishing kit identifiers have been harvested, leaving the specific lure or impersonated brand unknown.
The lack of a certificate and the recent registration date are typical of fast‑flux or throwaway phishing infrastructure, but without content samples the threat actor’s campaign goals cannot be confirmed. Defenders should continue to block the IP address 1.2.3.4 at network perimeters, add www.cwardin.net to local URL filtering lists, and monitor Cloudflare name‑server changes for potential re‑hosting. Additional scanning of the domain, should it become active again, is recommended to capture HTTP responses and any credential‑harvesting pages. Organizations that employ outbound traffic controls should deny connections to the domain and its hosting IP until a thorough content analysis can be performed.
Data Coverage
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif