# PhishDestroy domain threat record: hyperecosystems.app Content language: English Canonical HTML report: https://phishdestroy.io/domain/hyperecosystems.app/ Machine-readable companion: https://phishdestroy.io/domain/hyperecosystems.app/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 15:29:08 UTC - Last availability or vendor check: 2026-10-21 15:29:08 UTC - Stored record updated: 2026-10-21 15:45:14 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.3.249 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 ## Evidence links - URLScan report: https://urlscan.io/result/01a15f12-becf-750f-b474-e4cf957f8b49/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/hyperecosystems.app - Certificate Transparency search: https://crt.sh/?q=%25.hyperecosystems.app - Web Archive lookup: https://web.archive.org/web/*/https://hyperecosystems.app/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI marked the page as unknown because the content was insufficient for analysis. The domain was first observed by PhishDestroy on 2026-10-21, returning HTTP 200 and displaying the page title “Rewards”. How the scam works The listing does not confirm any specific fraud technique. In general, newly registered domains with generic reward‑oriented titles can be used to lure users into credential or wallet‑address disclosure, phishing, or other social‑engineering attacks, but no concrete behavior was observed on this page. Evidence VirusTotal scanned the domain on 2026-10-19 and reported 0 malicious and 0 suspicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-21 and did not flag the site. OTX recorded no pulses on 2026-10-21. External blocklists MetaMask and SEAL listed the domain on 2026-10-21, and PhishDestroy’s internal list marked it as blocked on the same date. URLScan’s machine‑learning engine gave a malicious score of 95, but its overall verdict was non‑malicious; the capture recorded the HTTP 200 response and the “Rewards” title on 2026-10-21. Infrastructure The domain was registered on 2026-10-19 with NICENIC INTERNATIONAL GROUP CO., LIMITED. Hosting is provided through Cloudflare, with recorded A records 104.21.3.249 and 172.67.131.98 and corresponding AAAA addresses. The TLS certificate, issued by Let’s Encrypt / YE2, is valid until 2027-01-17 and covers *.hyperecosystems.app. DNSSEC signatures were not present. What to do Visitors should avoid entering any credentials, wallet addresses, or personal information on the site; if any data was submitted, change associated passwords immediately. Defenders should add hyperecosystems.app to blocklists, monitor network logs for connections to the recorded IPs, and review related alerts for phishing or fraud attempts. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15f12-becf-750f-b474-e4cf957f8b49/ Cloudflare Radar report: https://radar.cloudflare.com/scan/4f50f2c4-a448-4239-82be-7b8062ca38bd Stored capture screenshot: https://urlscan.io/screenshots/01a15f12-becf-750f-b474-e4cf957f8b49.png Cloudflare Radar screenshot (2026-10-21T15:30:49Z): https://screenshots.phishdestroy.io/cf/4f50f2c4-a448-4239-82be-7b8062ca38bd.png URLScan screenshot (2026-10-21T15:28:23Z): https://screenshots.phishdestroy.io/us/01a15f13-d2a0-7531-878c-644b8730cd3f.png URLScan capture report: https://urlscan.io/result/01a15f13-d2a0-7531-878c-644b8730cd3f/ VirusTotal report: https://www.virustotal.com/gui/domain/hyperecosystems.app Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=hyperecosystems.app Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 15:35:08 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15f12-becf-750f-b474-e4cf957f8b49.png Captured: 2026-10-21 15:29:08 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15f12-becf-750f-b474-e4cf957f8b49.png Captured: 2026-10-21 15:29:08 UTC Source report: https://urlscan.io/result/01a15f12-becf-750f-b474-e4cf957f8b49/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4f50f2c4-a448-4239-82be-7b8062ca38bd.png Captured: 2026-10-21 15:30:49 UTC Source report: https://radar.cloudflare.com/scan/4f50f2c4-a448-4239-82be-7b8062ca38bd SHA-256: acb1ca3d59bd24045da9038674beb748d7e75b46974a641130488cdbb20f770f - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f13-d2a0-7531-878c-644b8730cd3f.png Captured: 2026-10-21 15:28:23 UTC Source report: https://urlscan.io/result/01a15f13-d2a0-7531-878c-644b8730cd3f/ SHA-256: 357318153fa464c441545f24d5cf0cebf55f43bdfe409c0cf597d9d59c628a3e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T15:32:41Z", "uuid": "01a15f12-becf-750f-b474-e4cf957f8b49", "scanned_at": "2026-10-21T15:27:12Z", "final_url": "https://hyperecosystems.app/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://hyperecosystems.app/", "from": "http://hyperecosystems.app/", "status": 307 } ], "ip": "172.67.131.98", "domains": [ "fonts.gstatic.com", "lb.drpc.live", "drain-6dh7jyka.b-cdn.net", "distinguished-newest-leaf.megaeth-mainnet.quiknode.pro", "distinguished-newest-leaf.sei-pacific.quiknode.pro", "evm-ws.sei-apis.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflareinsights.com" ], "ips": [ "142.251.42.99", "151.101.65.229", "142.250.195.138", "103.180.114.1", "104.16.79.73", "172.67.131.98" ], "asns": [ "15169", "54113", "200325", "13335" ], "countries": [ "US", "AU" ], "link_domains": [ "rysk.finance" ], "doc_hash": "3f4c3741f2c9a43347cec650b46ed5ad2e5b1f20e21df9e259a099a18ae57835", "globals": [ "__cfBeacon" ], "cookies": [ "__cflb" ], "tls": { "san": [ "*.hyperecosystems.app", "hyperecosystems.app" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "hyperecosystems.app", "protocol": "QUIC", "valid_to": "2027-01-17T17:07:19Z", "valid_from": "2026-10-19T17:07:20Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 1, "tls_valid_days": 89, "requests": 13, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T15:32:43Z", "uuid": "4f50f2c4-a448-4239-82be-7b8062ca38bd", "scanned_at": "2026-10-21T15:30:49Z", "final_url": "https://hyperecosystems.app/", "status": 200, "history": [ { "url": "https://hyperecosystems.app/", "status": 200 } ], "dom_hash": "91f8bc599108bbde1fef3c539dde241f7ed6b2dd9ec5ee624c4ea02433583712", "doc_hash": "3f4c3741f2c9a43347cec650b46ed5ad2e5b1f20e21df9e259a099a18ae57835", "phishing_v2": [ "phishing" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "hyperecosystems.app", "type": "A", "value": "104.21.3.249" }, { "name": "hyperecosystems.app", "type": "A", "value": "172.67.131.98" }, { "name": "hyperecosystems.app", "type": "AAAA", "value": "2606:4700:3037::6815:3f9" }, { "name": "hyperecosystems.app", "type": "AAAA", "value": "2606:4700:3030::ac43:8362" } ], "dnssec_valid": false, "ip": "104.21.3.249", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-19T18:03:29Z", "updated": "2026-10-19T18:03:29Z", "expires": "2027-10-19T18:03:29Z", "nameservers": [ "carlos.ns.cloudflare.com", "diva.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T15:30:07Z", "analysis_at": "2026-10-19T18:12:39Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 0, "suspicious": 0, "undetected": 39 }, "reputation": 0, "first_seen": "2026-10-19T18:13:00Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "carlos.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.3.249" }, { "ttl": 21600, "type": "NS", "value": "diva.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:3f9" }, { "ttl": 300, "type": "A", "value": "172.67.131.98" }, { "ttl": 21600, "type": "NS", "value": "carlos.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:8362" } ], "dns_at": "2026-10-19T18:13:00Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.hyperecosystems.app", "hyperecosystems.app" ], "issuer": "Let's Encrypt / YE2", "serial": "6042e06e9223a3d5650cd955bbd00c4d0f6", "sha256": "ebb83e699b7a4defec1acf02d921b27198a3a2602068f86dadeb9b39c08e23e9", "subject": "hyperecosystems.app", "valid_to": "2027-01-17T17:07:19Z", "valid_from": "2026-10-19T17:07:20Z" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-10-19T16:00:00Z", "registration": "2026-10-19T16:00:00Z", "registrar expiration": "2027-10-19T16:00:00Z", "last update of RDAP database": "2026-10-19T16:00:00Z" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T15:32:58Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "hyperecosystems.app" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "title": "Rewards" }, "trackers": { "requests": 9, "trackers": [ { "name": "Bunny CDN", "company": "BunnyWay", "country": "SI", "category": "Hosting", "requests": 2 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 30, "wait": 112, "connect": 20, "download": 0 }, "response_ms": 167 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 1013, "co2_grams": 0, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "172.64.35.112", "host": "carlos.ns.cloudflare.com" }, { "ip": "173.245.58.97", "host": "diva.ns.cloudflare.com" } ], "zone": "hyperecosystems.app" }, "cookies": { "cookies": [ { "name": "__cflb", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "2606:4700:3030::ac43:8362", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "hyperecosystems.app" }, "dns": { "A": [ "104.21.3.249", "172.67.131.98" ], "NS": [ "diva.ns.cloudflare.com", "carlos.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"carlos.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418008180, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3037::6815:3f9", "2606:4700:3030::ac43:8362" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3037::6815:3f9", "family": 6 }, "redirects": { "chain": [ "https://hyperecosystems.app" ] }, "tech_stack": { "technologies": [ "Bunny", "Cloudflare", "HTTP/3" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```