leumi-rewards[.]info

leumi-rewards.info is a domain currently under investigation for phishing activities impersonating bank rewards programs. The site is classified as an active phishing threat, with threat actors leveraging deceptive branding to harvest user credentials and sensitive financial information. leumi-rewards.info was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security engines. The domain resolves to IP address 152.232.9.171, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 03, 2026. The domain utilizes a Let's Encrypt SSL certificate, which may enhance its perceived legitimacy. Despite its recent creation, the absence of detections and low blocklist presence suggests a potentially emerging or carefully orchestrated campaign. As of this assessment, leumi-rewards.info remains active and poses a high risk to unsuspecting users. It is recommended to avoid interacting with this domain or clicking on any associated links. Users who suspect exposure should immediately change passwords, enable multi-factor authentication, and scan devices for malware. Security researchers are advised to monitor for updates as further intelligence becomes available. Blocklists should be updated promptly to preempt potential phishing attempts targeting banking customers.