hyperlqiuid[.]co[.]com

The domain hyperlqiuid.co.com was registered on February 21, 2026 and remains active as of July 12, 2026. It is classified as a high‑risk brand impersonation targeting the Hyperliquid brand. The site returns an HTTP 302 redirect and presents the page title "Account Suspended". No additional page content has been disclosed, leaving the exact user‑facing experience uncertain.

Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which belongs to AS13335 owned by Cloudflare, Inc. The domain utilizes Cloudflare services, including support for HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 hierarchy. Nameservers listed are ns1.nic.co.com through ns4.nic.co.com, indicating standard DNS delegation through the registrar Moniker Online Services LLC.

Threat intelligence sources report that only one security blocklist currently lists the domain, but it has been blocked by the PhishDestroy service. VirusTotal analysis flagged the domain by 1 of 95 security vendors, and the Gridinsoft trust score is 0 out of 100, reinforcing the suspicion of malicious intent. These signals collectively suggest a focused impersonation campaign rather than a broad, indiscriminate phishing operation.

Defenders should add hyperlqiuid.co.com to proxy and DNS filtering rules, monitor for any outbound connections to the associated IP address, and flag any traffic that follows the observed HTTP 302 redirect pattern. Continuous re‑evaluation is advised, as the page content beyond the title has not been publicly examined, and additional indicators may emerge from future crawls or user reports.