# rewards-avici.money — SUSPICIOUS

> The domain rewards-avici.money is flagged for potential phishing. It is currently offline, but caution is advised to avoid scams.

## Summary
PhishDestroy identifies rewards-avici.money as a domain associated with generic phishing activity, which involves deceptive tactics designed to steal sensitive information such as login credentials or financial data. Although this particular threat is rated as low risk, phishing remains a significant concern because attackers often mimic legitimate sites, putting users at risk of fraud or identity theft.

The domain rewards-avici.money was registered recently with NiceNIC International Group Co., Limited, and resolves to the IP address 188.114.97.3. It was created on March 11, 2026, but has since been taken offline. Despite its brief lifespan, it appeared on at least one security blocklist and was flagged by 2 out of 95 security vendors in VirusTotal scans. The page title "Nur einen Moment…" suggests an attempt to engage users with a waiting or loading message, a common tactic in phishing schemes to lure victims.

Users should avoid interacting with rewards-avici.money or providing any personal data if encountered. Since the domain is currently offline, the immediate risk is diminished; however, phishing attackers often reuse infrastructure or create similar domains. It is recommended to stay vigilant, use updated security software, and verify URLs before submitting sensitive information online. Reporting suspicious domains to security services like PhishDestroy helps improve collective safety.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Nur einen Moment…

## Domain Intelligence
- Registered: 2026-03-11 21:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["donald.ns.cloudflare.com", "etta.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce201-9198-766b-a763-45887f0e8748.png
- PhishDestroy: https://phishdestroy.io/domain/rewards-avici.money/
- LLM endpoint: https://phishdestroy.io/domain/rewards-avici.money/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rewards-avici.money/
Last updated: 2026-03-19