hyperewarded[.]com
“Hyperliquid”
Résumé des preuves
On July 25 2026 the domain hyperewarded.com was observed hosting a brand‑impersonation site that mimics Hyperliquid. The site’s HTML title resolves to “Hyperliquid”, confirming the intent to deceive users seeking the legitimate service. Registration data shows the domain was created on 28 October 2025 and is registered through NiceNIC International Group Co., Limited. DNS resolution points to 188.114.96.3, an address owned by Cloudflare (ASN 13335) and the authoritative nameservers are achiel.ns.cloudflare.com and oaklyn.ns.cloudflare.com, indicating the infrastructure is fully proxied through Cloudflare’s network and served over HTTP/3. The TLS certificate presented is issued by Google Trust Services under the “WE1” intermediate, which is typical for Cloudflare‑managed domains and does not convey any additional trust beyond the hosting provider.
Threat intelligence indicates the site was used for a crypto‑related scam, classified as a “Crypto Scam”, and it has been taken offline. The domain currently appears on a single security blocklist and was blocked by PhishDestroy. VirusTotal analysis shows four of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification despite the low detection count. No further public Safe Browsing or OTX entries were identified. Defenders should add hyperewarded.com to internal block lists and ensure any outbound traffic to its IP address 188.114.96.3 is denied.
Because the site is hosted behind Cloudflare, simple DNS‑based blocking may be insufficient if the attacker re‑hosts the payload on a new sub‑domain; therefore, monitoring for new domains that resolve to the same Cloudflare IP range is advisable. Email gateways should be tuned to flag messages that reference Hyperliquid and contain links to newly registered domains, especially those created after October 2025. Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any future re‑activations.
Data Coverage
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
-
VirusTotal
4 → 2
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
État du domaine
Inaccessible → Accessible
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of hyperewarded.com · checked Apr 6, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif