reward-mysticdao[.]xyz

The domain reward-mysticdao.xyz was registered on 27 February 2026 through NiceNIC International Group Co., Limited. DNS resolution points to 104.21.56.134, an address belonging to AS13335 Cloudflare, Inc. located in the United States. The authoritative nameservers are ainsley.ns.cloudflare.com and isaac.ns.cloudflare.com. No TLS certificate was observed, indicating that the site was served over plain HTTP.

The only visible page title is “Mystic Dao”, and the listed scam type is a “Fake Airdrop”. The site has been taken offline, but historical data show it was listed on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis recorded detections from 2 of 93 scanning engines, providing additional corroboration of malicious intent. The combination of a recent registration date, Cloudflare hosting, lack of encryption, and the presence of a fake‑airdrop lure aligns with typical phishing‑oriented infrastructure.

At present, concrete evidence about the page’s content, credential‑stealing mechanisms, or payload delivery is unavailable, so the full scope of the operation remains uncertain. Defenders should add reward-mysticdao.xyz to URL filtering rules, deny outbound connections to its IP address, and monitor the associated Cloudflare nameservers for any re‑activation. Ongoing threat‑intel feeds should be consulted for new detections, and any related indicators observed in network traffic should be treated as malicious.