qadden[.]com

The domain qadden.com was registered on February 27, 2026 through Cloudflare, Inc. and is hosted on the Cloudflare network (AS13335) with the public address 104.21.46.184, which resolves to a United States location. The site’s SSL certificate is issued by Let’s Encrypt (E7), and the authoritative name servers are grant.ns.cloudflare.com and maeve.ns.cloudflare.com. The page title observed during the brief crawl was "Qadden - QAD Presale," and the underlying stack was identified as WordPress running on PHP with a MySQL backend, supplemented by client‑side libraries including Raphael, Chart.js, Material Design Lite, jQuery, and jQuery Migrate. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal scans recorded two positive detections out of ninety‑three participating security vendors, indicating that at least a small subset of scanners flagged the host as malicious. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the suspicion of malicious intent. The site was reported as offline at the time of analysis, which may be a tactical takedown or a temporary service interruption.

No additional intelligence such as Safe Browsing or OTX references is available. Defenders should continue to enforce blocking of the IP 104.21.46.184 and the domain qadden.com across perimeter and endpoint controls, monitor for any re‑appearance of the host on alternative cloud services, and consider adding the domain to internal threat‑intel feeds. Ongoing observation of Cloudflare‑registered domains with similar creation dates and low trust scores is recommended to pre‑empt potential resurgence of this phishing infrastructure.