rewards-gacha[.]com

This domain, rewards-gacha.com, is confirmed to operate as a crypto airdrop scam infrastructure, specifically targeting users through brand impersonation of the $GACHA token distribution portal. The site presents itself as an official airdrop portal, leveraging social engineering tactics to deceive victims into connecting cryptocurrency wallets or disclosing sensitive credentials. Analysis indicates the campaign is designed to facilitate unauthorized access to digital assets, aligning with known patterns of crypto drainer attacks observed in similar fraudulent schemes.

Infrastructure analysis reveals the following technical indicators: the domain is flagged by 13 out of 95 security vendors on VirusTotal, with detection signatures indicating malicious intent. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 03, 2024, and currently resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of fraudulent sites attempting to appear legitimate. The domain appears on four security blocklists and is actively blocked by multiple wallet security providers, further corroborating its malicious classification.

As of the latest verification, rewards-gacha.com remains active and continues to pose a high risk to users. The domain has not been taken down by the registrar or hosting provider, and no evidence suggests a cessation of fraudulent activity. Users are advised to treat any interaction with this domain as malicious, avoid connecting wallets, and report the infrastructure to relevant security teams. Given the persistence of the threat and the absence of remediation, continued monitoring and proactive blocking are recommended to mitigate potential financial losses.