Analysis for

cardingshop.online

Flare Score

Safe

FlareAI™ Summary

Cardingshop.online, self-described as a "Verified Carding Shop" serving carders, raises significant concerns despite a "safe" FlareScore of 79/100. While possessing a valid SSL certificate and clean Google Safe Browsing status, the domain is only 0 months old. The site uses WordPress, includes payment processing and user accounts. Given the nature of services offered, users should exercise extreme caution and be aware of potential legal and financial risks.

+5.5%

than category average

Canada

Server Country

3 months

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

WHOIS information publicly available

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Modern security headers configured (HSTS, CSP)

Good website performance

Built with WordPress (established platform)

Uses CDN for better performance and security

Negative Signals

Very new domain (less than 3 months old)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✗ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Dec 10, 2025

Valid Until

Mar 10, 2026

Certificate Expired

Security Headers

HSTS

CSP

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

cardingshop.online Analysis

FlareScore™: 79/100 (Safe Risk)

Our analysis of cardingshop.online identified 9 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 3 months

AI Content Review

9 DNS Records

Analysis Sources

• WHOIS: Tucows.com Co.
• SSL: Google Trust Services
• DNS: 9 records analyzed
• Content: Visual & text analysis

Last Checked

Dec 28, 2025
2 months ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

3 months

Registered Dec 10, 2025

Low Trust

Dec 2025 Expires Dec 2026

New domain (less than 6 months old) - Exercise caution

Registrar

Tucows.com Co.

Registration Date

Dec 10, 2025 (3 months ago)

Last Updated

Dec 10, 2025

Expiration Date

Dec 10, 2026 (267 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

+1.4165350123

Domain Name: CARDINGSHOP.ONLINE
Registry Domain ID: D623461957-CNIC
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com/
Updated Date: 2025-12-10T09:38:40.0Z
Creation Date: 2025-12-10T02:37:26.0Z
Registry Expiry Date: 2026-12-10T23:59:59.0Z
Registrar: Tucows.com Co.
Registrar IANA ID: 69
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: ELEANOR.NS.CLOUDFLARE.COM
Name Server: ETIENNE.NS.CLOUDFLARE.COM
DNSSEC: unsigned
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4165350123
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2025-12-28T13:57:03.0Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

>>> IMPORTANT INFORMATION ABOUT THE DEPLOYMENT OF RDAP: please visit
https://www.centralnicregistry.com/support/information/rdap <<<

The registration data available in this service is limited. Additional
data may be available at https://lookup.icann.org

The Whois and RDAP services are provided by CentralNic, and contain
information pertaining to Internet domain names registered by our
our customers. By using this service you are agreeing (1) not to use any
information presented here for any purpose other than determining
ownership of domain names, (2) not to store or reproduce this data in
any way, (3) not to use any high-volume, automated, electronic processes
to obtain data from this service. Abuse of this service is monitored and
actions in contravention of these terms will result in being permanently
blacklisted. All data is (c) CentralNic Ltd (https://www.centralnicregistry.com)

Access to the Whois and RDAP services is rate limited. For more
information, visit https://centralnicregistry.com/policies/whois-guidance.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

AAAA

TXT

HTTP Headers

Key server response headers for security analysis.

Security (2)

HSTS

Content Security Policy

Technology

                                            PHP/8.4.8
                                        

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9b5190854c7d85fe-CDG
                                        

{
    "date": "Sun, 28 Dec 2025 13:57:03 GMT",
    "content-type": "text\/html; charset=UTF-8",
    "last-modified": "Sun, 28 Dec 2025 01:44:13 GMT",
    "x-two-page-cached": "1",
    "x-powered-by": "PHP\/8.4.8",
    "x-two-optimize": "1",
    "x-two-version": "2.30.18",
    "x-two-cache-date": "1766885954",
    "x-two-webp": "1",
    "x-two-page-is-optimized": "1",
    "link": "<https:\/\/cardingshop.online\/>; rel=shortlink",
    "vary": "Accept-Encoding",
    "x-litespeed-cache": "hit",
    "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4mxgc7sI0JG%2BKXzfCZZfsfdW4thhw0DOcwQKazwLio1oprP7btA5qCo5htuMGiDod%2BMpiET6dzEfiE00BIZ0ABsw3YbbtcieynkTR9sSCdhQeQ%3D%3D\"}]}",
    "server": "cloudflare",
    "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
    "content-security-policy": "upgrade-insecure-requests",
    "alt-svc": "h3=\":443\"; ma=86400",
    "x-turbo-charged-by": "LiteSpeed",
    "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
    "cf-cache-status": "DYNAMIC",
    "content-encoding": "gzip",
    "cf-ray": "9b5190854c7d85fe-CDG"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

188.114.97.0

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 +a +mx +ip4:198.58.109.140 include:spf.antispamcloud....

DKIM

Configured

DMARC

v=DMARC1; p=none;

Performance Metrics

Website loading speed and performance analysis

Average

Load Time

0.32s

Excellent

Page Size

0.69MB

Optimized

Requests

305

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.cardingshop.online

mail.cardingshop.online

ftp.cardingshop.online

webmail.cardingshop.online

Privacy & Trackers

3 Trackers Found

Google Analytics

General

Google Tag Manager

General

Cloudflare

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

cardingshop.online claims to be a "Verified Carding Shop," specializing in providing services to "carders." The site description suggests it's been operating for over 5 years and aims to be a trusted source, particularly in contrast to alleged scams on the dark web.

Security Assessment

The site uses a valid SSL certificate issued by Google Trust Services, expiring in 2026, which indicates basic encryption. However, the domain is only 0 months old, raising concerns about its legitimacy and long-term intentions. The website leverages Cloudflare, a reputable CDN and security provider. Importantly, Google Safe Browsing reports a CLEAN status, a positive signal indicating no current detection of malware or phishing.

Trust Level

The FlareScore of 79/100 suggests a moderate risk level. While the clean Google Safe Browsing status is reassuring, the recent domain registration and the nature of the site's advertised services ("carding") introduce substantial risk. The presence of trackers also raises privacy concerns.

Recommendations

Exercise extreme caution. While the site has a decent FlareScore and a clean Google Safe Browsing report, engaging with carding activities is illegal and carries significant legal and financial risks. The new domain age should be a major red flag. Do not purchase or exchange any information on this website. Be aware of potential scams and law enforcement

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.