exclusive-rewards[.]online

Analysis indicates that the domain exclusive-rewards.online was registered on July 20, 2026 through the CV. Rumahweb Indonesia registrar. The domain resolves to the IPv4 address 202.10.43.43 and uses the Rumahweb name server set ns1.rumahweb.com, ns2.rumahweb.com, ns3.rumahweb.net, ns4.rumahweb.net. VirusTotal reports that three of ninety‑one scanned security vendors have flagged the domain as malicious, demonstrating a modest but notable detection rate.

The domain currently appears on three public blocklists and is explicitly listed as blocked by the PhishDestroy, MetaMask, and SEAL filtering services. The threat classification in the intelligence is “generic phishing” with a high risk rating, and the campaign status is marked as active as of the report date, July 22, 2026. No further technical attributes such as SSL certificate details, HTTP response codes, or page‑title information have been disclosed, leaving the content and exact phishing vector unverified. The limited detection count suggests that the malicious infrastructure may be newly deployed, and the presence on multiple blocklists indicates that at least some protective services have observed abusive activity associated with the host.

Defenders should prioritize immediate blocking of the domain at perimeter controls, update DNS filtering policies to include the listed nameservers, and ensure that any inbound or outbound traffic to the IP address 202.10.43.43 is denied. Security teams should also monitor the registrar CV. Rumahweb Indonesia for any additional domains that resolve to the same name server set, as this may reveal a broader campaign. Continuous re‑evaluation of VirusTotal and other sandbox results is recommended, as detection coverage is expected to increase as the campaign matures.