reward-heisted[.]xyz

This domain, reward-heisted.xyz, operates as a fraudulent crypto reward platform designed to deceive users into connecting wallets under the guise of claiming fake rewards or bonuses. Analysis indicates the site functions as a crypto drainer, executing unauthorized transactions to siphon digital assets from victims' wallets once connected. The page title 'Heisted' further suggests malicious intent, likely aiming to exploit users through social engineering tactics that create urgency or false legitimacy. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain is flagged by 5 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100, indicating no legitimate reputation. It appears on three independent security blocklists and is actively blocked by multiple wallet protection mechanisms. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 26, 2026, the domain resolves to the IP address 188.114.97.3, which has been associated with other phishing campaigns in recent threat intelligence reports. Users who visited reward-heisted.xyz or interacted with its content should immediately revoke any wallet connections made to the site. Monitor all linked accounts for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Browser extensions or applications installed after visiting the domain should be removed, and systems scanned for malware. Report the incident to relevant blockchain security teams and maintain heightened vigilance for follow-up phishing attempts via email or social media.