hyperewarded[.]com
“Hyperliquid”
Resumen de las pruebas
On July 25 2026 the domain hyperewarded.com was observed hosting a brand‑impersonation site that mimics Hyperliquid. The site’s HTML title resolves to “Hyperliquid”, confirming the intent to deceive users seeking the legitimate service. Registration data shows the domain was created on 28 October 2025 and is registered through NiceNIC International Group Co., Limited. DNS resolution points to 188.114.96.3, an address owned by Cloudflare (ASN 13335) and the authoritative nameservers are achiel.ns.cloudflare.com and oaklyn.ns.cloudflare.com, indicating the infrastructure is fully proxied through Cloudflare’s network and served over HTTP/3. The TLS certificate presented is issued by Google Trust Services under the “WE1” intermediate, which is typical for Cloudflare‑managed domains and does not convey any additional trust beyond the hosting provider.
Threat intelligence indicates the site was used for a crypto‑related scam, classified as a “Crypto Scam”, and it has been taken offline. The domain currently appears on a single security blocklist and was blocked by PhishDestroy. VirusTotal analysis shows four of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification despite the low detection count. No further public Safe Browsing or OTX entries were identified. Defenders should add hyperewarded.com to internal block lists and ensure any outbound traffic to its IP address 188.114.96.3 is denied.
Because the site is hosted behind Cloudflare, simple DNS‑based blocking may be insufficient if the attacker re‑hosts the payload on a new sub‑domain; therefore, monitoring for new domains that resolve to the same Cloudflare IP range is advisable. Email gateways should be tuned to flag messages that reference Hyperliquid and contain links to newly registered domains, especially those created after October 2025. Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any future re‑activations.
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
VirusTotal
4 → 2
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Inaccesible → Accesible
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of hyperewarded.com · checked Apr 6, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.