mythicalreward[.]pages[.]dev

Analysis of the domain mythicalreward.pages.dev indicates it is associated with a fake airdrop phishing campaign, currently offline as of July 24, 2026. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 172.66.44.100, hosted on Cloudflare's network (AS13335) in the United States. The SSL certificate is issued by Google Trust Services (WE1), and the domain employs HSTS and HTTP/3 technologies, alongside Cloudflare nameservers sara.ns.cloudflare.com and santino.ns.cloudflare.com. The page title was recorded as 'official,' though the exact content and targeting remain unconfirmed beyond its classification as a fake airdrop scam.

Infrastructure analysis reveals the domain has been flagged by four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk status. Despite these indicators, the domain was scanned by 93 vendors on VirusTotal with no current detections, though the absence of detections does not confirm safety. The HTTP status returned a 403 error at the time of assessment, and the domain has since been taken offline.

Defenders should treat this domain as malicious based on its presence on multiple blocklists, low trust scores, and association with known phishing infrastructure. While the domain is currently inactive, historical resolution to Cloudflare's network and the use of legitimate SSL certificates suggest an attempt to evade detection. Monitoring for re-emergence under similar naming conventions or infrastructure is recommended. No brand-specific targeting beyond the 'official' page title and fake airdrop classification has been confirmed, and further forensic analysis of the site's content is required to determine precise victim profiles or payload delivery mechanisms.