reward-meta[.]com

Analysis of reward-meta.com indicates an active phishing domain targeting users through a fake airdrop scheme. The domain was registered on February 21, 2026, via Hello Internet Corp and remains operational as of July 12, 2026. Infrastructure analysis reveals Cloudflare-hosted nameservers (achiel.ns.cloudflare.com, linda.ns.cloudflare.com) and resolution to IP 188.114.97.3, part of AS13335. The site returns an HTTP 521 status, suggesting server-side misconfiguration or intentional blocking evasion, while detected technologies include Cloudflare Browser Insights and HTTP/3. The domain appears on five security blocklists and is flagged by 20 of 93 vendors in aggregated scans, with a trust score of 0/100. Known mitigations include blocking by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The page title 'Sara Pink' provides no clear brand association, but the scam type is classified as a fake airdrop, likely targeting cryptocurrency users. SSL certification is provided by Google Trust Services (WE1), a common feature in both legitimate and malicious domains. Defenders should treat this domain as high-risk. Recommended actions include immediate blacklisting at the DNS or network level, monitoring for related subdomains or IP associations, and alerting users to the fake airdrop classification. The exact content and targeting mechanisms remain unverified due to limited page analysis, but the infrastructure and blocklist presence confirm malicious intent.