reward-line[.]click

The domain reward-line.click has been identified as a high-risk generic phishing site. Analysis indicates that the domain was created on September 05, 2025, and is currently active as of July 12, 2026. The domain is registered through Dynadot, LLC, and utilizes Cloudflare for DNS management with nameservers aiden.ns.cloudflare.com and sierra.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services, which may provide a false sense of security to unsuspecting visitors. The domain resolves to the IP address 172.67.170.183, located in the United States and associated with Cloudflare, Inc. (AS13335). Despite the presence of an SSL certificate, the domain has been flagged by PhishDestroy, a security blocklist, and has a Gridinsoft trust score of 0/100, indicating a highly untrustworthy site. The page title 'Sky City' suggests that the phishing campaign may be impersonating a legitimate brand or service, though the specific target remains unclear. The site's HTTP status code 302 suggests that it may be redirecting visitors to another location, potentially a more sophisticated phishing page or a malicious download site. Technologies detected on the domain include OneSignal, jQuery, and HTTP/3, which are commonly used in modern web development and may be leveraged to enhance the credibility and functionality of the phishing site. Defenders and users should exercise extreme caution when encountering this domain. It is recommended to block access to the site at the network level, monitor for any related activity, and educate users about the risks of phishing. Further investigation into the redirect target and the nature of the phishing content is warranted to understand the full scope of the threat and to develop more targeted defensive measures.