anyone-rewards[.]live

This domain presents an elevated risk as a credential theft phishing operation, designed to trick users into surrendering sensitive login information. The site's title, 'Un instant…', suggests a fake loading page typical of credential harvesting attacks. The domain was created on February 23, 2026, and is registered through NiceNIC International Group Co., Limited, a registrar often associated with malicious domains. It resolves to IP address 188.114.96.3 and is protected by a Let's Encrypt SSL certificate (E7), which lends an air of false legitimacy. VirusTotal reports that 2 out of 95 security vendors flag this domain, and it appears on at least one security blocklist, reinforcing the threat.

Given the nature of this credential theft campaign, users who have visited the site should immediately change their passwords for any accounts entered and enable multi-factor authentication where available. It is also advisable to scan the affected device for any malware that may have been downloaded. PhishDestroy recommends blocking this domain at the network level to prevent further access and reporting it to relevant threat intelligence platforms to aid in takedown efforts.