clawnch-rewards[.]xyz

The domain clawnch-rewards.xyz was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to the IP address 104.21.60.207, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are johnny.ns.cloudflare.com and serenity.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services. No SSL certificate is presented for the host, meaning HTTPS connections would be unencrypted if the site were reachable.

The only publicly observed page title is "CLAWNCH | Distribution," and the listed scam type is a "Fake Airdrop," suggesting the site was intended to lure victims with a fraudulent cryptocurrency distribution claim. Detection telemetry shows that eight of ninety‑three security vendors on VirusTotal flagged the domain, and it appears on two external blocklists. Community‑driven blocklists PhishDestroy and ScamSniffer have already listed the domain, and AlienVault OTX includes it in one threat‑intel pulse. These independent signals reinforce the assessment that the domain is being used for phishing‑related activity.

Because the site is offline, no HTTP status code or content can be examined, and no further page‑level artifacts (forms, scripts, or redirects) are available for analysis. Consequently, the precise phishing kit or any payload delivery mechanisms remain unknown. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any future re‑hosting of the same hostnames or IP address, and consider adding the IP 104.21.60.207 to reputation‑based blocklists, especially given its association with Cloudflare‑hosted malicious content. Ongoing vigilance is advised for any new domains registered by the same registrar that exhibit similar naming patterns or target the same airdrop narrative.