hyperewarded[.]com
“Hyperliquid”
Resumo das evidências
On July 25 2026 the domain hyperewarded.com was observed hosting a brand‑impersonation site that mimics Hyperliquid. The site’s HTML title resolves to “Hyperliquid”, confirming the intent to deceive users seeking the legitimate service. Registration data shows the domain was created on 28 October 2025 and is registered through NiceNIC International Group Co., Limited. DNS resolution points to 188.114.96.3, an address owned by Cloudflare (ASN 13335) and the authoritative nameservers are achiel.ns.cloudflare.com and oaklyn.ns.cloudflare.com, indicating the infrastructure is fully proxied through Cloudflare’s network and served over HTTP/3. The TLS certificate presented is issued by Google Trust Services under the “WE1” intermediate, which is typical for Cloudflare‑managed domains and does not convey any additional trust beyond the hosting provider.
Threat intelligence indicates the site was used for a crypto‑related scam, classified as a “Crypto Scam”, and it has been taken offline. The domain currently appears on a single security blocklist and was blocked by PhishDestroy. VirusTotal analysis shows four of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification despite the low detection count. No further public Safe Browsing or OTX entries were identified. Defenders should add hyperewarded.com to internal block lists and ensure any outbound traffic to its IP address 188.114.96.3 is denied.
Because the site is hosted behind Cloudflare, simple DNS‑based blocking may be insufficient if the attacker re‑hosts the payload on a new sub‑domain; therefore, monitoring for new domains that resolve to the same Cloudflare IP range is advisable. Email gateways should be tuned to flag messages that reference Hyperliquid and contain links to newly registered domains, especially those created after October 2025. Continuous re‑scanning with VirusTotal or similar multi‑engine services is recommended to capture any future re‑activations.
Data Coverage
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 13/08/2026
10 fontes externas monitoradas Sem correspondência
Linha do tempo de detecção
-
Status do domínio
Acessível → Inacessível
-
VirusTotal
4 → 2
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
-
Status do domínio
Inacessível → Acessível
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of hyperewarded.com · checked Apr 6, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo