rewards-hyperliquid[.]org

This domain is assessed as having an elevated risk level and is specifically associated with brand impersonation. The threat involves the use of the domain to mimic the legitimate Hyperliquid brand, potentially leading to user deception and data theft.

Analysis indicates that rewards-hyperliquid.org was created on November 06, 2025, and is registered through NiceNIC International Group Co., Limited. The domain resolves to the IP address 104.21.19.142. According to VirusTotal, 4 out of 95 security vendors flag this domain as malicious. The domain appears in one threat intelligence pulse on AlienVault OTX and has a Gridinsoft trust score of 0/100, indicating a complete lack of trust. The domain is also listed on one security blocklist and is blocked by PhishDestroy. Additionally, the page title 'Nur einen Moment…' suggests that users are being redirected or are in a temporary holding state, which is often a tactic used in phishing attacks to delay detection.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the URL of the website they are visiting and ensure it matches the official Hyperliquid domain. Organizations should update their security policies to include blocking the IP address 104.21.19.142 and the domain rewards-hyperliquid.org. Security teams should also monitor for any similar domains that may be registered and educate employees on the signs of brand impersonation, such as unexpected redirects, unprofessional page layouts, and requests for sensitive information.