rewards[.]kgen[.]network

The domain rewards.kgen.network was registered on February 21 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. It is currently active and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is hosted behind Cloudflare’s network and is accessible via HTTP/3.

Technical probing shows the site returns an HTTP 403 response and presents the page title “Just a moment…”. The authoritative name servers are earl.ns.cloudflare.com and melody.ns.cloudflare.com, confirming the use of Cloudflare’s DNS. TLS termination is provided by a Google Trust Services certificate (WE1), indicating a valid HTTPS endpoint.

Threat intelligence classifies the domain as a “Fake Airdrop” campaign, a common social‑engineering vector that pretends to distribute cryptocurrency rewards. The site is listed on one security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded one positive detection out of ninety‑five scanners, while Gridinsoft assigns a trust score of 0/100, reflecting a high confidence of malicious intent. The combination of a newly created domain, low trust scores, and the “Just a moment…” title suggests a redirect or challenge page designed to evade automated crawlers.

Defenders should add rewards.kgen.network to network‑level deny lists and monitor DNS queries for the associated Cloudflare IP range. Email gateways should block any messages referencing airdrop rewards from this domain. Incident response teams should treat any credential or wallet information submitted to the site as compromised and advise users to change passwords and revoke tokens. Continuous threat‑intel feeds should be consulted for any additional indicators related to this infrastructure.