jellybeanrewardclaim[.]pages[.]dev

Analysis indicates that jellybeanrewardclaim.pages.dev was registered on March 12 2026 and is hosted behind Cloudflare's network, resolving to IP 188.114.96.3 in the United States under ASN 13335. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy, reflecting its classification as a crypto‑drainer scam. The SSL certificate associated with the site carries the identifier “E7”, and the site employs HSTS, HTTP/3, and Cloudflare‑provided security headers, which are typical for fastly‑served malicious infrastructure.

The page title observed during the brief scan reads “DebbugDappNode”, providing no direct indication of the underlying payload but confirming the presence of a web application likely intended to interact with cryptocurrency wallets. VirusTotal analysis shows that one out of ninety‑four scanning engines flagged the domain, reinforcing the suspicion of malicious activity despite a low detection ratio. The domain’s current status is offline, which limits real‑time observation but does not eliminate the risk posed by previously cached or distributed assets.

Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the host, and consider adding the IP address 188.114.96.3 to threat‑intel feeds. Additional investigation of the certificate chain and any archived content could yield further indicators of compromise. Until the site reappears, the existing evidence warrants an elevated risk rating and proactive mitigation.