app[.]hvvpvrlivuid[.]com

The domain app.hvvpvrlivud.com was a cryptocurrency phishing site engaged in brand impersonation targeting users of the 'foundation' platform. It posed as a legitimate service to deceive victims into connecting wallets, potentially leading to unauthorized transactions or fund theft. No drainer kit was identified, but the site operated as a scam under the guise of 'Hyperliquid' trading. As of the latest verification, app.hvvpvrlivud.com has been taken offline.

Technical indicators show app.hvvpvrlivud.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. The domain appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. It was created on February 21, 2026, and resolved to the IP address 45.134.10.34, hosted by AS400529 Infraly, LLC in the US. The SSL certificate was issued by R13, and the observed page title was '40.672 | HYPE/USDC | Hyperliquid'. Registrar details were not available.

Victims who interacted with app.hvvpvrlivud.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to relevant platforms, including the impersonated brand's support team, and submit abuse reports to the hosting provider (Infraly, LLC) and SSL issuer (R13). If financial loss occurred, file a report with local cybercrime authorities.