rewardss[.]cloud

This domain, rewardss.cloud, is identified as a credential phishing site specifically targeting customers of Bank of the Philippine Islands (BPI). The page title, 'Bank of the Philippine Islands | BPI,' and detected technologies such as Adobe Experience Manager and Salesforce Interaction Studio suggest an attempt to mimic legitimate BPI online banking portals. The site likely harvests login credentials, one-time passwords (OTP), and other sensitive financial information from unsuspecting users under the guise of a rewards or account verification process.

Analysis indicates the domain was registered on May 31, 2026, through Hefei Juming Network Technology Co., Ltd, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.64.67 and has been flagged by 7 out of 95 security vendors on VirusTotal. Additionally, the domain appears on three security blocklists and has been actively blocked by multiple threat intelligence platforms. The use of HSTS and Google Tag Manager further suggests an attempt to appear legitimate while tracking user interactions.

Users who visited rewardss.cloud should immediately reset their BPI online banking credentials using a secure, trusted device. Enable multi-factor authentication (MFA) if not already active. Monitor bank statements for unauthorized transactions and report any suspicious activity to BPI’s official fraud response team. Avoid clicking on links from unsolicited emails or messages, and verify the authenticity of any financial communication by contacting BPI directly through official channels.