kardcas[.]com

Analysis of kardcas.com shows that the domain resolves to the Cloudflare‑owned address 172.67.195.121, located in the United States under ASN 13335. An HTTP request to the site returned a 403 response with the page title "Suspected phishing site | Cloudflare," indicating that the hosting provider has already flagged the content as malicious. The domain was registered on February 21, 2026 through MAT BAO CORPORATION and uses the Cloudflare nameservers donovan.ns.cloudflare.com and surina.ns.cloudflare.com. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming a valid HTTPS endpoint despite the malicious classification.

Reputation signals are strongly negative: Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on one external security blocklist. PhishDestroy has recorded the site as taken offline, and three of ninety‑three VirusTotal scanners flagged it as malicious, reinforcing the suspicion of phishing activity. Cloudflare is the only technology detected, consistent with the hosting environment. No additional intelligence such as a specific brand target, phishing kit, or payload details has been publicly disclosed, leaving the exact content of the phishing page unverified.

Defenders should immediately add kardcas.com to DNS‑based blocklists and firewall deny lists, monitor the associated IP address for re‑use, and watch for any re‑registration attempts. Continuous surveillance of the Cloudflare nameservers and the registrar MAT BAO CORPORATION is advised, as threat actors may attempt to resurrect the domain or shift to sibling domains. Given the low trust score, blocklist presence, and vendor detections, the domain should be treated as high‑confidence malicious and excluded from user access.