cardween[.]com

Domain www.cardween.com was created on July 18, 2026 and is registered through Cloudflare, Inc. The authoritative nameservers grant.ns.cloudflare.com and maeve.ns.cloudflare.com resolve the domain to the IP address 188.114.96.3, an address hosted by Cloudflare’s network. The domain appears on a single security blocklist and has been flagged by the PhishDestroy feed as a phishing‑related indicator. VirusTotal records show that the site was scanned by 91 antivirus and URL‑reputation vendors, none of which reported a detection at the time of analysis; this lack of detection does not confirm the absence of malicious content. Current threat intelligence classifies the site as a generic phishing vector, and the risk level remains under investigation while the status is listed as active.

No additional public intelligence such as Safe Browsing verdicts, OTX mentions, SSL certificate details, or HTTP response codes is present in the available data, leaving those aspects of the infrastructure unverified. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any new detections from additional scanning services, and consider adding the address 188.114.96.3 to host‑based deny lists. Ongoing observation of the Cloudflare nameserver records is advised, as rapid changes are common in phishing campaigns.

Because the domain is newly registered, the short age may be indicative of a throw‑away setup intended for short‑term abuse. Organizations that rely on email or web filtering should ensure that their phishing‑prevention rules include this indicator while awaiting further attribution. Until more detailed payload or page‑content analysis becomes available, the primary mitigation focus should be on network‑level containment and alerting on any attempted connections to the domain.