rewards-alt[.]fun

This domain, rewards-alt.fun, is actively impersonating a platform offering coins allegedly backed by Hyperliquid perpetuals (perps). Analysis indicates it functions as a phishing site designed to deceive users into disclosing wallet credentials or transferring assets under the pretense of launching tokenized derivatives. The page title explicitly references "Alt Fun — Launch coins backed by Hyperliquid perps," a tactic likely intended to exploit interest in decentralized finance (DeFi) and synthetic asset trading. Infrastructure analysis reveals the domain was registered on May 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It currently resolves to the IP address 104.21.2.181, hosted behind Cloudflare infrastructure in Canada. Security vendor detections on VirusTotal stand at 1 out of 95, while the domain appears on three distinct security blocklists. The SSL certificate is issued by Let's Encrypt (serial number E8), a common but non-exclusive indicator of legitimacy that does not mitigate the underlying threat. Users who visited rewards-alt.fun should immediately revoke any wallet permissions granted to the site. If credentials or private keys were entered, affected parties must transfer assets to a new wallet and monitor for unauthorized transactions. Browser caches and stored sessions should be cleared to prevent persistent access. Given the domain's active status and high-risk classification, all interactions with it should be treated as compromised until verified otherwise.