heima-reward[.]com

heima-reward.com imitates the Heima Network brand, aiming to deceive users into divulging sensitive information. Despite being taken down, the domain was flagged by 2 out of 91 VirusTotal vendors and is listed in public blocklists by PhishDestroy, MetaMask, and SEAL. This indicates a significant threat level, as reflected by its platform risk score of 73/100.

The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP address managed by Cloudflare, Inc. The SSL certificate was issued by Google Trust Services, suggesting an attempt to appear legitimate. The swift detection by PhishDestroy on June 20, 2026, just three days after its creation, highlights the effectiveness of proactive threat monitoring.

While the site is currently offline, its initial activity underscores the importance of rapid detection and response. The presence on multiple blocklists indicates a coordinated effort to prevent further exploitation. The case of heima-reward.com serves as a reminder of the ongoing battle against phishing threats and the need for continuous vigilance in cybersecurity efforts.