# morpho-rewards.live — SUSPICIOUS

> Beware! The domain morpho-rewards.live is a live crypto drainer targeting Morpho Finance users. Verify legitimacy before engaging—scan via PhishDestroy for.

## Summary
PhishDestroy identifies the active crypto drainer domain morpho-rewards.live as impersonating Morpho Finance to steal cryptocurrency assets.

This malicious domain was flagged by 4 of 95 VirusTotal vendors upon analysis. It operates under a Let’s Encrypt SSL certificate, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 216.198.79.1. The domain was created on April 06, 2026, and has appeared on 2 security blocklists, including SEAL and MetaMask. Trust indicators are critically low, signaling elevated risk.

This domain remains actively dangerous. Users are urged to avoid all interactions and verify any Morpho Finance-related links using PhishDestroy. Report suspicious activity immediately and ensure wallet connections are validated against official Morpho Finance channels.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-06 17:04:09
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 216.198.79.1

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a82c3987-0418-4596-a31d-f3aef02d97d8
- PhishDestroy: https://phishdestroy.io/domain/morpho-rewards.live/
- LLM endpoint: https://phishdestroy.io/domain/morpho-rewards.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/morpho-rewards.live/
Last updated: 2026-04-11