rewards-recall[.]network
The domain rewards-recall.network has been identified as a generic phishing threat, currently under investigation by PhishDestroy. The site is now offline, but when active it displayed the generic title "Just a moment..." and likely attempted to trick users into entering sensitive information under the guise of a rewards program. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.96.3, with SSL certificate issued by Google Trust Services (WE1).
PhishDestroy's analysis reveals that the domain was created on March 27, 2026, and appears on 1 security blocklist. Despite being flagged by 1 threat intelligence pulse on AlienVault OTX, VirusTotal reports 0 out of 95 vendors detecting it as malicious, indicating the site may have evaded broader detection. The domain's registration through a relatively obscure registrar and its recent creation date are additional red flags consistent with phishing infrastructure.
As of now, rewards-recall.network is offline, which limits immediate risk. However, PhishDestroy recommends that users who may have interacted with this site monitor their accounts for unauthorized activity and change any passwords or sensitive credentials that may have been compromised. Users are advised to verify the legitimacy of any rewards offers by visiting official brand websites directly, and to report any suspicious communications to PhishDestroy for further investigation.
Network Security Intelligence Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | rewards-recall.network |
malicious | Sinkholed |
| DNS4EU | rewards-recall.network |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-14 02:46:26 UTC
VirusTotal Analysis
Site Configuration Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive