rewards-usdai[.]org

The domain rewards-usdai.org has been identified as a generic phishing domain, currently offline. While it does not impersonate a specific brand, its name suggests it targets users of the USDai stablecoin platform, luring victims with fake rewards. The domain was taken offline following detection, but its registration and hosting details provide valuable forensic data.

According to intelligence, rewards-usdai.org resolves to IP address 104.21.20.131 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 2, 2026. It appears on 4 security blocklists, and VirusTotal reports that 1 out of 95 security vendors flagged the domain as malicious. The SSL certificate was issued by Let's Encrypt (E7), which is commonly used by both legitimate and malicious sites, so this does not indicate trustworthiness.

Given its elevated risk level and clear phishing intent, users who have interacted with rewards-usdai.org should treat any communications or prompts as fraudulent. No credentials or personal information should have been entered, and any devices exposed to the domain should be scanned for malware. As the domain is now offline, the immediate threat is contained, but similar domains may appear. PhishDestroy recommends monitoring for lookalike domains and educating users about phishing tactics that promise fake rewards.