cardano-invest[.]net

Analysis on cardano-invest.net shows the domain was registered on 4 November 2025 through Web Commerce Communications Limited and is hosted behind Cloudflare (nameservers paige.ns.cloudflare.com, ruben.ns.cloudflare.com, ASN 13335, IP 188.114.96.3 located in the United States). The site presents an SSL certificate issued by Google Trust Services under the WE1 root, indicating a legitimate‑looking HTTPS endpoint. HTTP requests return a 403 status and the visible page title reports a "522: Connection timed out" error, suggesting the server is currently unreachable; the domain is listed as taken offline by the reporting source.

Reputation data flags the domain on one security blocklist and confirms it is blocked by PhishDestroy. Google Safe Browsing classifies the URL as social engineering, and VirusTotal records 14 of 93 scanners flagging it as malicious. AlienVault OTX includes the domain in three threat‑intel pulses.

The observed phishing kit is identified as an "Airdrop Scam" and the overall scam type is recorded as an investment scam, implying attempts to lure victims into fraudulent Cardano‑related investments. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IP and Cloudflare nameservers, and update URL filtering lists to include the domain. Because the site is offline, active takedown may already be in effect, but threat actors could reactivate the infrastructure; ongoing observation of the registrar and hosting provider for new domains using similar naming patterns is advised.