wundays[.]com

The domain wundays.com is currently flagged as an active phishing site targeting users through a fraudulent rewards program. Analysis indicates this is a generic phishing threat designed to harvest credentials or personal information under the guise of an "Exclusive Rewards Program." The domain remains operational and poses an elevated risk to visitors. Infrastructure analysis reveals the domain was registered on May 5, 2026, through Spaceship, Inc., and resolves to the IP address 216.198.79.1. Detection metrics show 9 of 95 security vendors on VirusTotal have flagged wundays.com as malicious. The site employs a Let's Encrypt SSL certificate and utilizes Vercel hosting with HTTP Strict Transport Security (HSTS) enabled, likely to appear legitimate. No known brand impersonation is detected, but the page title explicitly mimics reward program lures. The domain remains active and unblocked by many security platforms, requiring immediate mitigation. Network administrators are advised to add wundays.com and its resolving IP (216.198.79.1) to blocklists. End users should avoid interacting with the site or entering credentials. Organizations should monitor for related phishing attempts leveraging similar reward-themed lures and update detection rules to include this domain and its infrastructure.