dontrewardclaim-2d3[.]pages[.]dev

Analysis of the domain dontrewardclaim-2d3.pages.dev shows that it was registered on March 12 2026 through Cloudflare, Inc. The domain resolves to the Cloudflare‑owned address 172.66.47.151 located in the United States under ASN 13335, and it uses Cloudflare’s DNS service with the authoritative nameservers lex.ns.cloudflare.com and maisie.ns.cloudflare.com. The site is protected by HTTP Strict Transport Security and serves content over HTTP/3, indicating a modern TLS configuration; the presented SSL certificate carries an E8 rating. An HTTP request to the root URL returns a 403 status code, which is consistent with a deliberately restricted response often used to hide malicious payloads. The page title reported by scanners is “DebbugDappNode”, a string that does not correspond to any known legitimate service and suggests a placeholder or a custom‑built interface possibly related to decentralized applications.

The domain appears on a single security blocklist and is listed as blocked by PhishDestroy, confirming that at least one external threat‑intelligence feed has flagged it as malicious. VirusTotal analysis shows that two of ninety‑four security vendors have raised detections against the domain, providing independent confirmation of suspicious activity. The classification “Crypto Scam” and the specific threat type “crypto drainer” are present in the intelligence, indicating that the infrastructure is likely intended to intercept or exfiltrate cryptocurrency assets.

No public evidence of the actual content or payload has been released, and the site is currently offline, limiting direct observation. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated Cloudflare IP address, and enforce strict outbound controls on cryptocurrency transaction traffic to mitigate potential loss.