Skip to content
Scammers.com
Fake prize & rewardReviewed

MalwareTips: claimbonusdaily.pages.dev fake '$750 Shein gift card' page funnels visitors into paid offers

MalwareTips published an investigation today calling claimbonusdaily.pages.dev a gift card scam. It found the page's title reads "Shein Gift Card - Claim Your $750", that its claim button opens a tracking link on an a…

First reported
Reports
1

Source: malwaretips.com · published

Screenshot of the claimbonusdaily.pages.dev Shein gift-card claim page with device-confirmation buttons
Image: MalwareTips

What happened

MalwareTips published an investigation today calling claimbonusdaily.pages.dev a gift card scam. It found the page's title reads "Shein Gift Card - Claim Your $750", that its claim button opens a tracking link on an affiliate network domain rather than the retailer's website, and that it is hosted on a free Cloudflare Pages address where anyone can put up a page in minutes. MalwareTips says the named retailer does not run or approve the offer and will not send a card. According to MalwareTips, pages like this lead visitors into a lead-generation funnel: sign-up forms asking for email, phone number, home address and date of birth, then sponsored 'deals' such as paid trials, subscriptions, app installs or credit applications that must be completed to 'unlock' the card, with conditions that keep changing so the card is never delivered. Details entered can generate marketing emails, texts and calls for months, and unwanted trials can turn into full-price subscriptions. The phishing-tracking account PhishDestroy also flagged claimbonusdaily.pages.dev as phishing on November 10, 2026. Shein is the impersonated brand, not the operator. Advice from MalwareTips: don't hand over your details, don't begin any of its deals and don't wait for a card.

How the scam works

MalwareTips found that the page title reads "Shein Gift Card - Claim Your $750", that its claim button opens a tracking link on an affiliate network domain rather than the retailer's website, and that it is hosted on a free Cloudflare Pages address where anyone can put up a page in minutes. According to MalwareTips, pages like this lead visitors into a lead-generation funnel: sign-up forms asking for email, phone number, home address and date of birth, then sponsored deals such as paid trials, subscriptions, app installs or credit applications that must be completed to "unlock" the card, with conditions that keep changing so the card is never delivered.

Details entered can generate marketing emails, texts and calls for months, and unwanted trials can turn into full-price subscriptions. Shein is the impersonated brand, not the operator, and does not run or approve the offer. The tracking account PhishDestroy also flagged the address on 10 November 2026. Do not hand over your details or begin any of the deals, and do not wait for a card.

Source

MalwareTips investigation, 10 November 2026: https://malwaretips.com/blogs/claimbonusdaily-pages-dev-reward-offer-exposed-scam-or-legit/

Red flags

  • A $750 Shein gift card or similar prize page that is not on the retailer's own site.
  • A claim button that opens an affiliate tracking link rather than shein.com.
  • Forms asking for email, phone number, home address or date of birth, then paid trials or app installs, to unlock a card.
  • A free-hosting address such as a pages.dev subdomain running the offer.
  • Conditions that keep changing so the card is never delivered.

If you were targeted

  1. 1Do not hand over your details or begin any of the deals, and do not wait for a card.
  2. 2Shein does not run or approve this offer; ignore pages that use its name for a prize.
  3. 3If you entered details, watch for marketing messages and unwanted subscriptions and cancel any trials.
  4. 4If a card payment was taken, contact your bank or card issuer.
  5. 5Report the page to the retailer and to a national reporting service.

MalwareTips: clothing store hervalife.com in scam network, 4 VirusTotal flags

MalwareTips published an investigation today rating hervalife.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • hervalife.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: household-goods store deniudy.com in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating deniudy.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new na…

  • deniudy.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: candy store thebakedbox.in in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating thebakedbox.in a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • thebakedbox.in
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: 10-day-old mariellecollective.com clothing and bag store part of scam network

MalwareTips published an investigation today rating mariellecollective.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening u…

  • mariellecollective.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report