rewardnet[.]site

This domain, rewardnet.site, is actively impersonating Walmart as part of a high-risk phishing operation targeting consumers with fraudulent gift card offers. Analysis indicates the site presents itself as a legitimate promotion, displaying the page title 'Win up to $1000 Walmart Gift Card,' a common tactic to lure victims into disclosing personal or financial information. The domain was registered on November 20, 2025, through Atak Domain Bilgi Teknolojileri A.Ş., and remains operational as of July 12, 2026, despite being flagged by at least one security blocklist. Infrastructure analysis reveals the domain resolves to the IP address 198.54.114.233, hosted under AS22612 (Namecheap, Inc.) in the United States. The site employs LiteSpeed web server technology and is secured with a Sectigo Limited SSL certificate issued for public server authentication. While only one out of ninety-five security vendors on VirusTotal currently flags the domain, this limited detection does not diminish the risk, as phishing campaigns often evade initial scans through rapid iteration or obfuscation techniques. The nameservers, dns1.namecheaphosting.com and dns2.namecheaphosting.com, further link the infrastructure to a known hosting provider frequently utilized for both legitimate and malicious purposes. The threat classification aligns with generic phishing, though the specific attack vector remains unverified without deeper forensic analysis. Defenders should prioritize blocking access to this domain at the network level, particularly in environments where Walmart-related promotions are irrelevant or unauthorized. Monitoring for related domains registered through the same registrar or resolving to the same IP range may uncover additional components of this campaign. Given the domain's recent registration and active status, organizations should treat it as a live threat and investigate any user interactions or data submissions tied to the site.