rewards-onre[.]finance

Analysis of rewards-onre.finance indicates a recently established phishing domain targeting users with fraudulent reward schemes. The domain was registered on July 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and remains active as of July 24, 2026. Infrastructure checks reveal the domain resolves to the IP address 62.60.226.88, though no nameservers are currently assigned, which may suggest an incomplete or evasive setup.

The domain appears on one security blocklist and is blocked by PhishDestroy, while VirusTotal reports flagging by 2 of 91 security vendors, confirming its malicious classification. No further details regarding the specific brand impersonated, phishing kit used, or exact content of the site are available at this time. The absence of nameservers and minimal detection coverage may indicate early-stage deployment or attempts to evade automated detection systems.

Defenders are advised to treat this domain as high-risk and implement blocking measures at the DNS or network level. Additional monitoring of the resolving IP 62.60.226.88 may reveal related malicious infrastructure, though no associated ASN or hosting provider details are currently available. Given the domain's recent registration and active status, further investigation into its hosting environment and potential ties to other phishing campaigns is recommended.