official-rewards[.]live

This domain, official-rewards.live, is flagged as a generic phishing site designed to harvest user credentials under the guise of fake reward programs. Analysis indicates no association with legitimate brands, though the site likely impersonated common loyalty or survey-based incentives to deceive victims. The infrastructure shows no evidence of a known drainer kit, suggesting a custom or low-sophistication phishing framework. Technical indicators confirm the domain's malicious nature. It was registered on February 27, 2026, through NiceNIC International Group Co., Limited, an offshore registrar frequently used for fraudulent domains. The domain resolves to IP address 188.114.97.3, hosted on Cloudflare's network (AS13335), a common tactic to obscure origin servers. VirusTotal reports 13/95 security vendors flagging the domain as malicious. The domain appears on three security blocklists, including PhishDestroy and SEAL, and lacks an SSL certificate, further reducing its legitimacy. Google Safe Browsing (GSB) status is not provided, but the blocklist presence aligns with phishing behavior. As of the latest assessment, official-rewards.live has been taken offline, likely due to hosting provider or registrar intervention. However, residual risk remains due to the domain's recent creation date and the registrar's history of slow abuse response. Organizations should maintain blocklist entries for this domain and monitor for re-registration or DNS reactivation. Users who interacted with the site should assume credential compromise and initiate password resets on associated accounts. Network defenders are advised to inspect logs for connections to 188.114.97.3 during the domain's active period.