rewards[.]fiuid[.]app

On July 24, 2026, the domain rewards.fiuid.app was observed actively resolving to the IPv4 address 104.21.47.191. The domain lacks publicly resolvable name‑server records (NS_NOT_FOUND) and is not listed in any known registrar‑level abuse feeds. It has been added to a single security blocklist and is flagged by the PhishDestroy sinkhole as malicious.

VirusTotal analysis shows that one out of ninety‑one scanning engines returned a positive detection, indicating that at least one security product recognizes the host as suspicious. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is currently available, and the underlying phishing kit or targeted brand has not been identified. The limited detection footprint suggests that the infrastructure may be newly deployed or that the campaign is using evasive techniques to avoid broader exposure.

Defenders should block the domain at perimeter firewalls and DNS resolvers, monitor outbound connections to the associated IP address, and include the host in threat‑intel feeds used for automated URL filtering. Continuous re‑evaluation is recommended, as further analysis may reveal additional indicators such as malicious payloads, credential‑harvesting pages, or expanded attribution to known phishing kits.