omikamireward[.]web[.]app

This domain, omikamireward.web.app, is flagged as an elevated-risk generic phishing site targeting users with fraudulent reward schemes. Analysis indicates the domain was designed to deceive victims into submitting personal or financial information under the guise of legitimate promotions, a common tactic in credential harvesting and social engineering attacks. The threat type aligns with fake reward phishing, where attackers impersonate trusted brands to exploit user trust and urgency. Infrastructure analysis reveals the domain was registered through Google LLC and resolves to the IP address 199.36.158.100. It appears on four security blocklists, including Codeesura, Polkadot, PhishDestroy, and Enkrypt, and is flagged by 3 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, and the domain employs Firebase, HSTS, and HTTP/3 technologies. The page title, 'Site Not Found,' suggests the domain was either hastily abandoned or taken offline following detection. No specific creation date is available, but the combination of technical indicators and blocklist presence confirms malicious intent. Mitigation steps for this threat type include blocking the domain and its associated IP (199.36.158.100) at the network perimeter. Organizations should update endpoint protection rules to flag or quarantine any attempts to access omikamireward.web.app or related subdomains. User awareness training should emphasize verifying reward-based communications, particularly those urging immediate action or requesting sensitive data. Monitoring for similar domains registered through Google LLC or resolving to the same IP range may help identify additional phishing infrastructure. If user credentials were exposed, reset protocols should be initiated immediately, and multi-factor authentication should be enforced to prevent unauthorized access.