venom-1hg[.]pages[.]dev

This domain, venom-1hg.pages.dev, is actively flagged as a high-risk phishing infrastructure targeting users with a fake airdrop scam. Analysis indicates the domain was registered on April 4, 2026, through Cloudflare, Inc., and remains operational as of July 12, 2026, with an HTTP 200 status. The page title, 'Web3.World – Claim Your Bonus,' suggests an attempt to deceive users into believing they are interacting with a legitimate cryptocurrency or Web3 platform offering rewards. The domain resolves to the IP address 188.114.96.3, associated with Cloudflare’s network in Canada, and uses Cloudflare nameservers (armfazh.ns.cloudflare.com and sima.ns.cloudflare.com). Infrastructure review reveals the domain is present on at least one security blocklist, with a trust score of 0/100. Three of 94 security vendors on VirusTotal have flagged the domain, though the exact detection context remains unverified. The SSL certificate is issued by Let’s Encrypt (serial E7), a common choice for both legitimate and malicious domains. While the domain’s content has not been fully analyzed, the combination of a newly registered domain, low trust scores, and active blocklisting aligns with known phishing tactics. Defenders should treat this domain as hostile and prioritize blocking or monitoring traffic to it. Given the lack of confirmed brand impersonation beyond the page title, additional analysis of the site’s payload or redirect behavior is recommended to determine the full scope of the threat. No evidence currently links this domain to broader campaign infrastructure, but its persistence and active status warrant continued scrutiny.