rewards-usdai[.]pro

Analysis of rewards-usdai.pro indicates that the domain was created on March 06, 2026 and is currently taken offline. The domain resolves to the IP address 172.67.212.38, which belongs to AS13335 Cloudflare, Inc., confirming that the site leveraged Cloudflare’s CDN infrastructure. DNS queries return the authoritative name servers buck.ns.cloudflare.com and ollie.ns.cloudflare.com, both associated with the same provider. The registrar listed for the registration is PDR Ltd. d/b/a PublicDomainRegistry.com.

An HTTPS request to the site presents a Let’s Encrypt certificate issued to the E8 organization, and the server responded with HTTP status code 403, indicating that direct content retrieval is blocked. The page title returned by the server is "USD AI," and the listed scam type is a fake airdrop, a common vector for cryptocurrency‑related fraud. VirusTotal analysis shows that one of ninety‑four scanning engines flagged the domain, suggesting malicious behavior, and the domain appears on four independent security blocklists. Additionally, the domain is actively blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL, reinforcing the consensus that it is used for phishing or fraudulent activity.

Defenders should add the domain and its associated IP address to deny‑list rules across perimeter firewalls, DNS resolvers, and endpoint protection platforms. Continuous monitoring of Cloudflare‑originated IP ranges for similar newly registered domains is advised, as the infrastructure choice may indicate a pattern of rapid deployment for fraudulent campaigns. Since the site is offline, any residual caching or redirect infrastructure should be examined for persistence mechanisms, and users who may have previously accessed the URL should be warned of potential credential or wallet compromise.