florkclaimreward[.]pages[.]dev

Analysis of florkclaimreward.pages.dev shows a newly created domain (registered 08 June 2026) hosted on Cloudflare Pages. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one trusted threat‑intelligence feed has identified it as malicious. VirusTotal records reveal that the site has been scanned by 91 AV vendors, with none reporting a detection; however, the lack of detections does not constitute evidence of benign behavior and should not be interpreted as a safety indicator.

No public information is available regarding the domain’s IP address, autonomous system number, geographic location, SSL certificate details, HTTP response codes, or page title, limiting the depth of infrastructure profiling. The only concrete attribute is its classification as a "crypto drainer," suggesting attempts to persuade victims to transfer cryptocurrency to attacker‑controlled wallets.

Defenders should treat the domain as hostile: add it to DNS blocklists, enforce URL filtering, and monitor network traffic for outbound connections to the associated Cloudflare edge nodes. Continuous re‑evaluation is advised, as additional indicators may emerge from future sandbox or telemetry analyses.