hyperliquidapp[.]live

As of July 26, 2026, the domain hyperliquidapp.live is classified as a high-risk phishing threat and remains active. Analysis reveals that the domain is hosted on nameservers ns1.vercel-dns.com and ns2.vercel-dns.com and is registered via Name.com, Inc. The HTTP response code 307 indicates redirection activity, which is often associated with attempts to guide visitors to potentially malicious destinations, though the exact redirection target and webpage content have not been directly analyzed in this report.

This domain is included on at least one security blocklist, specifically referenced as blocked by PhishDestroy. Furthermore, VirusTotal data shows that 15 out of 91 security vendors currently flag hyperliquidapp.live as malicious. This detection volume is a strong indicator of consensus among threat intelligence providers regarding the domain's malicious intent. The domain is still active, further increasing risk to potential visitors and organizations whose users may be targeted.

At present, there is no available public evidence detailing the specific content, scam kit, or brand targeting associated with this domain. The absence of direct analysis of the page title or web content limits the ability to characterize the exact nature of the phishing activity beyond its generic classification. Defenders are advised to block traffic to hyperliquidapp.live at both the network and endpoint levels and update security controls in response to continued threat activity. Monitoring for related domains utilizing similar infrastructure is also recommended. Continued vigilance is required as the domain's active status and confirmed detection by multiple vendors present ongoing risk to users and organizations.