duplicate-disabled-289088.invalid

www.reward-telcoin.app is currently active and classified as a generic_phishing infrastructure. DNS resolution returns the IPv4 address 196.251.107.102; the domain’s authoritative name servers could not be retrieved (NS_NOT_FOUND). The domain was submitted to VirusTotal and examined by 91 AV engines, none of which raised a detection at the time of analysis. Absence of detections does not confirm benign behavior, and the lack of detections may reflect limited heuristic coverage for this specific payload. The domain’s registration details, hosting ASN, and geographic location have not been disclosed in the available intelligence, leaving the operator’s attribution uncertain. Threat actors appear to be leveraging the reward‑telcoin branding to lure victims into credential‑harvesting or financial‑information submission flows, consistent with the generic_phishing label. Defenders should block network traffic to 196.251.107.102 and to the fully qualified domain name, monitor DNS queries for look‑ups of www.reward-telcoin.app, and consider adding the domain to email and web filtering rule sets. Continuous re‑scanning on multi‑engine platforms is advised to capture any future payload updates. Indicators of compromise (IOCs) are limited to the domain name and its resolving IP; additional forensic collection (e.g., TLS certificates, HTTP headers, page content) is required to refine detection signatures.