megaeth[.]gifts

Analysis of the domain megaeth.gifts indicates it was actively involved in a crypto scam operation, as evidenced by its classification in threat intelligence sources. The domain, now offline, previously resolved to IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). Infrastructure analysis reveals the use of Cloudflare nameservers (alexa.ns.cloudflare.com and randall.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are common among both legitimate and malicious sites but do not inherently confirm intent.

The domain was flagged by two of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy, which classified it as a phishing threat. The HTTP status at the time of assessment returned a 404 error, while the page title displayed 'megaeth.gifts | 504: Gateway time-out,' suggesting either temporary unavailability or takedown actions. The scam type is explicitly identified as a crypto scam, though the exact mechanics—such as whether it involved fake giveaways, wallet drainers, or investment fraud—remain unconfirmed due to the lack of accessible page content.

Defenders should treat this domain as compromised and include it in blocklists to prevent potential redirects or resurrected campaigns. The registration details point to Cloudflare, Inc. as the registrar, and the IP geolocation is associated with the United States, though this does not provide definitive attribution. Given the domain's current offline status, further forensic analysis of cached content or historical snapshots may be required to determine the full scope of its fraudulent activity.