app[.]carvs-webs[.]com

The domain app.carvs-webs.com is identified as a brand impersonation threat specifically targeting Discord users. Analysis confirms the domain is currently offline, though prior activity suggests malicious intent to deceive users by mimicking legitimate Discord services. The page title, 'Own, Control and Earn from Your Data | CARV Protocol,' does not align with Discord’s official branding, reinforcing the impersonation classification. Infrastructure analysis reveals the domain was flagged by 1 of 95 security vendors on VirusTotal, indicating limited but confirmed detection. It was registered through ARIN and resolved to the IPv6 address 2a06:98c1:3120::3. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, further corroborating its malicious nature. No creation date is available, but the combination of technical indicators and impersonation tactics aligns with known fraudulent campaigns. At present, app.carvs-webs.com is offline, reducing immediate risk to users. However, domains of this nature often reappear under similar or altered infrastructure. Organizations and individuals are advised to block the domain and associated IP at the network level. Users should verify all communications and links claiming to be from Discord through official channels only. Monitoring for related domains or IPs using the same registrar or hosting patterns is recommended for proactive defense.