meme-launch[.]pages[.]dev

This domain, meme-launch.pages.dev, was registered on 27 April 2026 through a Cloudflare‑managed registrar and resolves to the Cloudflare edge address 172.66.44.150 located in Canada. The site presents a valid TLS certificate (Let’s Encrypt, expiration E7) and enforces HTTP Strict Transport Security, while supporting HTTP/3. HTTP requests return status 200 and the page title is “Fee Distribution Portal”, consistent with the reported fake‑airdrop scam. Infrastructure analysis shows the domain is served entirely by Cloudflare’s network, using the nameservers annalise.ns.cloudflare.com and quinton.ns.cloudflare.com. Reputation tooling rates the site at 0/100 on Gridinsoft and it is listed on a single phishing blocklist; PhishDestroy has already blocked it. No malware detections have been reported by scanning services, but the absence of detections does not confirm safety. The primary threat indicator is the combination of a newly‑created domain, a convincing TLS setup, and a page title that mimics legitimate token distribution portals, which is typical of fake‑airdrop phishing campaigns. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the associated IP range, and consider sink‑holing the domain to capture any future payloads. Further investigation of the site’s content and any submitted credentials is required to determine the full scope of credential harvesting.