codashop[.]event-rewards[.]com

The domain codashop.event-rewards.com was registered on November 28, 2025 through Aceville Pte. Ltd. and is currently reported as taken offline. Its authoritative nameservers are arvind.ns.cloudflare.com and jewel.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s network (ASN 13335). DNS resolution points to the IP address 172.67.137.157, which is geolocated to the United States. No TLS certificate was observed, meaning the site does not present a valid HTTPS endpoint.

The page title returned by the server is "LENZZ SCRIPT OFFICIAL" and the intelligence classification lists the scam type as a "Fake Airdrop". Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0/100, while Scamadviser rates it 1/100. The domain is listed on a single security blocklist and is blocked by the PhishDestroy service. VirusTotal analysis shows that 16 of 95 scanning engines flag the domain as malicious, reinforcing the assessment of elevated risk.

Although the site is offline, the combination of a recent registration, Cloudflare front‑end, absence of encryption, low trust scores, and multiple vendor detections suggests an active phishing infrastructure that was likely used to lure victims with a counterfeit airdrop offering. Defenders should ensure the domain and its resolving IP are added to deny‑list rules, monitor for any re‑registration attempts, and consider extending blocklist coverage to related Cloudflare edge nodes. Continuous verification of the domain’s status and periodic re‑scanning are recommended to capture any revival of the malicious payload.