movement-reward[.]top

Analysis of movement-reward.top indicates an active generic phishing infrastructure with an elevated risk rating. The domain was registered on June 09, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the IP address 172.67.198.44. Reputation data shows the domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal scans have recorded six positive detections out of ninety‑one submitted security vendors, reinforcing the malicious classification. The domain’s presence on multiple blocklists, combined with the vendor detections, suggests that threat actors are leveraging this name to host credential‑ harvesting pages or related malicious payloads. No public information is available regarding the site’s SSL certificate, HTTP response codes, or page title, and the specific content served by the domain has not been disclosed in the current intelligence set.

Defenders should consider adding movement-reward.top to DNS and URL filtering policies, enforce network‑level blocking of the associated IP 172.67.198.44, and monitor for any outbound connections to this host. Continuous re‑evaluation is recommended as additional telemetry becomes available, particularly any observed payloads, page content, or victim reports that could refine the threat profile.