hamsterkombat-coin[.]pages[.]dev

This domain is currently under investigation for hosting a cryptocurrency phishing scheme impersonating the HAMSTER KOMBAT token project. The infrastructure presents a targeted financial threat designed to harvest wallet credentials or distribute fraudulent token claims, with specific focus on users of the legitimate HAMSTER KOMBAT ecosystem. Analysis indicates the domain hamsterkombat-coin.pages.dev was registered on July 16, 2024, through Cloudflare, Inc. infrastructure. The page resolves to IP address 188.114.97.3 (AS13335, Cloudflare, Inc., US) and presents a page title of HAMSTER KOMBAT. Despite zero detections in VirusTotal's 95-engine scan (0/95), the domain appears on two security blocklists: PhishDestroy and ScamSniffer. The SSL certificate is issued by Google Trust Services (WE1), a common configuration for Cloudflare-hosted content. No historical detections or prior malicious associations were identified for this specific subdomain. Mitigation requires immediate domain-level blocking at network perimeters, particularly for endpoints accessing cryptocurrency services. Users should verify token claims exclusively through official HAMSTER KOMBAT communication channels, avoiding any interaction with pages.dev subdomains. Wallet software should be configured to reject connection attempts to this domain via RPC or API endpoints. Organizations processing cryptocurrency transactions should implement enhanced monitoring for traffic to 188.114.97.3 and associated Cloudflare IP ranges. Security teams are advised to treat this infrastructure as high-risk pending further investigation, given the combination of recent registration, blocklist presence, and targeted impersonation of a trending token project.