smartwise-rewardsclub[.]com

smartwise-rewardsclub.com was observed responding with HTTP 200 and serving a page titled “SMARTWISE REWARDS CLUB”. The site is classified as a generic phishing campaign and carries a high risk rating. Its registration date of May 14, 2026 and active status indicate recent deployment. The domain resolves to IP 138.128.175.66, which is hosted by HostDime.com, Inc. in the United States.

Infrastructure analysis shows the domain was registered through Realtime Register B.V. The authoritative name servers are dns33270.dizinc.com and dns33271.dizinc.com, and the MX record points to the same host name, suggesting limited mail functionality. The web server runs Apache HTTP Server and delivers content built with Bootstrap, jQuery, Google Hosted Libraries, and a reCAPTCHA widget. Communication is protected by a Let’s Encrypt R13 certificate, and the site advertises a valid SSL handshake.

Threat intelligence sources corroborate the malicious assessment. Gridinsoft assigns a trust score of 0 out of 100. The domain appears on three security blocklists and is listed as blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX includes the domain in a single pulse, and VirusTotal records one positive detection out of ninety‑five scanners. These indicators collectively reinforce the phishing characterization despite the low number of vendor flags.

Defenders should prioritize immediate blocking of both the domain and its resolved IP address at perimeter and DNS layers. Monitoring of the associated name servers and the host range of HostDime.com may uncover related payloads. Because the site uses common front‑end libraries, heuristic detection that inspects reCAPTCHA usage together with low Gridinsoft scores can improve early identification. Continuous feed updates from the listed blocklists are recommended to maintain coverage.