avagray-offers[.]pages[.]dev

avagray-offers.pages.dev was registered on March 23, 2026 through Cloudflare, Inc. The domain resolves to the Cloudflare‑owned address 188.114.97.3, which is associated with the CA location of Cloudflare, Inc. Authoritative name servers are glen.ns.cloudflare.com and perla.ns.cloudflare.com, confirming that the domain is fully hosted on Cloudflare’s network. The SSL certificate presented is issued by Google Trust Services under the WE1 root, indicating proper TLS termination via Cloudflare’s edge.

The web site returns an HTTP 403 status code, preventing direct content retrieval, but the page title captured during the initial request is "🔥 SuperPrize Giveaway - Claim Your Free Rewards Now!". The presence of HSTS, HTTP/3, and Cloudflare headers demonstrates use of modern security protocols. No malware detections were recorded on VirusTotal (0/95), and Gridinsoft assigns a trust score of 0 out of 100, reflecting a low reputation.

Intelligence flags the domain as a brand‑impersonation campaign targeting an “Airdrop Scam” theme, with the displayed title and the classification of a cryptocurrency‑related scam. The domain appears on one external security blocklist and is already blocked by PhishDestroy, indicating that at least one defensive feed has identified it as malicious. The combination of a newly created domain, a generic giveaway lure, and a zero trust score aligns with typical tactics used to lure victims into fraudulent airdrop offers.

Given the active status and the lack of definitive malware detection, the risk remains under investigation. Defensive teams should consider adding avagray-offers.pages.dev to DNS block lists, enforce TLS inspection to capture any redirected payload, and monitor for any outbound connections to the resolved IP address. Continuous re‑evaluation is advised as additional telemetry, such as user reports or detection hits, becomes available.