cedar[.]pages[.]dev

This domain, cedar.pages.dev, operates as a fraudulent token claim page targeting users of the Solana blockchain. The site presents itself as "Claim - Cedar DAO | Solana Token - CDR," falsely suggesting an opportunity to claim a legitimate CDR token. Analysis indicates the domain is designed to harvest credentials or deploy crypto-draining malware, a tactic increasingly observed in blockchain-related phishing campaigns. The page mimics the branding and structure of official Solana projects, leveraging social engineering to exploit users expecting airdrops or token distributions.

Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 18, 2026, and currently resolves to the IP address 188.114.96.3. Despite its malicious intent, the domain has not yet been widely flagged, with VirusTotal reporting 0 detections out of 95 security engines. However, it appears on one security blocklist and is blocked by PhishDestroy. The site employs technologies such as Bootstrap, HSTS, and HTTP/3, and its SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting visitors. The Gridinsoft trust score of 0/100 further corroborates its malicious classification.

Users who have interacted with cedar.pages.dev should immediately cease all engagement and disconnect any connected wallets or accounts. If credentials or wallet information were entered, affected users must transfer assets to a new, secure wallet and revoke any active session permissions tied to the domain. Monitor accounts for unauthorized transactions and report the incident to relevant blockchain security teams. Given the domain's current offline status, users should remain vigilant for similar schemes, particularly those impersonating Solana or other high-profile blockchain projects.