purpe-rewards[.]pages[.]dev

This domain, purpe-rewards.pages.dev, poses a high-risk brand impersonation threat targeting gate.io, a cryptocurrency exchange platform. The site presents itself as a rewards or token distribution page for $PURPE, a likely fabricated asset, to deceive users into disclosing login credentials, wallet details, or other sensitive information. Such impersonation schemes are commonly used to facilitate unauthorized account access, fund theft, or malware distribution under the guise of legitimate promotions or airdrops. Analysis indicates the domain was registered on September 02, 2025, through Cloudflare, Inc., a provider frequently leveraged for malicious infrastructure due to its anonymity and ease of deployment. Security vendor detections on VirusTotal show 3 out of 95 engines flagging the domain as malicious, a low but notable signal given the domain's recent creation. The SSL certificate is issued by Google Trust Services, providing a false sense of security while the underlying content remains fraudulent. Infrastructure analysis reveals the domain resolves to 172.66.44.237, hosted on Cloudflare's network (AS13335), and is currently blocked by at least two security blocklists, including PhishDestroy and ScamSniffer. Users who have visited purpe-rewards.pages.dev should immediately cease all interaction with the site. If credentials or wallet information were entered, affected accounts should be secured by changing passwords, enabling multi-factor authentication, and reviewing recent transactions for unauthorized activity. Wallet addresses should be checked for unexpected transfers, and any connected devices should be scanned for malware. Report the incident to the impersonated platform's security team and consider submitting the domain to additional threat intelligence feeds to aid in broader detection efforts.