cadwiin[.]com

This domain, cadwiin.com, is flagged as a generic phishing site designed to impersonate an AI-powered decentralized exchange protocol. Analysis indicates the site mimics legitimate cryptocurrency platforms, likely aiming to harvest user credentials, private keys, or facilitate unauthorized transactions. The page title, 'Cadwiin — AI-Powered Decentralized Exchange Protocol,' suggests an attempt to exploit interest in emerging blockchain technologies to deceive victims. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on May 15, 2026, and resolves to the IP address 104.21.90.133. Detection metrics show a VirusTotal score of 2/95 security vendors flagging the domain, with active blocks by PhishDestroy and OISD. The domain appears on two security blocklists, and its SSL certificate is issued by Let’s Encrypt. Technologies detected include Vercel, HSTS, Cloudflare Browser Insights, and HTTP/3, indicating a sophisticated deployment designed to evade basic detection mechanisms. As of the latest assessment, cadwiin.com has been taken offline, reducing immediate exposure risk. However, the domain’s infrastructure remains registered, and similar campaigns may re-emerge under different domains or IPs. Users are advised to verify decentralized exchange platforms through official channels and employ multi-factor authentication to mitigate credential theft risks. Organizations should monitor for related indicators of compromise, including the IP 104.21.90.133 and domains registered via Cloudflare with recent creation dates.