rewards-strata[.]app

Analysis indicates that rewards-strata.app was registered on July 14 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IPv4 address 196.251.107.102. The authoritative name servers are coco.bunny.net and kiki.bunny.net, both of which are hosted on the Bunny.net CDN platform. The domain appears on three public security blocklists and has been independently flagged by the PhishDestroy, MetaMask, and SEAL threat‑intelligence feeds, confirming its use in malicious campaigns.

VirusTotal scans show that three of ninety‑five AV engines have generated a detection for the domain, reinforcing the suspicion of phishing activity. No additional metadata such as SSL certificate details, HTTP response codes, or page titles have been disclosed in the available intelligence, leaving the exact content and lure technique unverified. The limited visibility into the hosting environment and the absence of public reputation scores mean that the full scope of the threat – including possible credential harvesting or secondary payload distribution – cannot be precisely quantified at this time.

Defenders should add rewards‑strata.app to inbound and outbound filtering policies, block the associated IP address 196.251.107.102 at the network perimeter, and ensure that any endpoint protection solutions incorporate the three vendor detections reported by VirusTotal. Continuous monitoring of the listed blocklists and of the two Bunny.net name servers is recommended, as the infrastructure may be leveraged for additional phishing domains. Organizations should also educate users about unsolicited requests that reference “rewards” or “strata” in order to reduce the risk of credential compromise.