official-rewards[.]pages[.]dev

The domain official-rewards.pages.dev was registered on April 06 2026 via Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which is associated with Cloudflare’s network in Canada. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and returns HTTP 200. The page title observed is “Discord Nitro & Robux Reward,” indicating a fake airdrop that targets Discord users. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that 1 of 94 scanning engines flagged the domain, and Gridinsoft assigns a trust score of 0 / 100. The infrastructure, including the kevin.ns.cloudflare.com and maxine.ns.cloudflare.com name servers, matches typical Cloudflare‑hosted malicious sites. Current intelligence confirms the domain is actively used for brand‑impersonation of Discord, leveraging the promise of Nitro and Robux rewards to lure victims. No additional payload or credential‑harvesting behavior has been publicly disclosed, so the exact victim interaction flow remains uncertain. Defenders should add the domain and its IP to block lists, monitor DNS queries for the associated Cloudflare name servers, and treat any URLs containing “official-rewards.pages.dev” as malicious. Continuous re‑evaluation is advised as further indicators may emerge.