kaarden[.]org
Verifica phishing e sicurezza per kaarden.org
“Kaarden Official Presale with up to 200% bonus”
kaarden.org — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Fake Airdrop. Riepilogo delle prove: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 69/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
Analysis of kaarden.org indicates the site is actively delivering a fake airdrop campaign. The domain was registered on 15 May 2026 through Cloudflare and resolves to 188.114.96.3, an IP owned by Cloudflare, Inc. in Canada. The authoritative nameservers are aitana.ns.cloudflare.com and norman.ns.cloudflare.com. TLS is provided by a Let’s Encrypt certificate (CN=E8), and the web server returns HTTP 200 for the landing page titled "Kaarden Official Presale with up to 200% bonus". Intelligence feeds list the site under a single AlienVault OTX pulse and it is currently listed on one public blocklist and blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, reflecting a high likelihood of malicious intent. The observed attributes align with a "Fake Airdrop" scam, where victims are enticed with exaggerated token bonuses. No public malware detections have been reported, but the absence of detections does not confirm safety. Defenders should add kaarden.org to URL filtering and sinkhole lists, monitor DNS queries for the Cloudflare nameservers, and enforce outbound traffic controls to prevent credential or wallet address exfiltration. Continuous re‑assessment is advised as the site remains active.
Copertura dei dati12 recorded checks
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.