claim-hyperliquids[.]xyz

This domain, claim-hyperliquids.xyz, poses a high-risk threat of brand impersonation, specifically targeting the Hyperliquid brand. The domain appears to mimic legitimate Hyperliquid services, likely to deceive users into providing sensitive information or engaging in fraudulent activities. The page title 'Hyperliquid l Airdrop' suggests that the domain may be attempting to lure users with the promise of a cryptocurrency airdrop, a common tactic in phishing attacks.

Analysis indicates that claim-hyperliquids.xyz has been flagged by 10 out of 95 security vendors on VirusTotal, a platform that aggregates detections from multiple antivirus and security services. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and has appeared on 7 security blocklists, including PhishDestroy and ScamSniffer. The domain resolves to an IP address in the United States (188.114.97.3) and is associated with Cloudflare, Inc. (AS13335). The SSL certificate is issued by Google Trust Services / WE1, which may be used to gain users' trust by displaying a secure connection.

If users have visited claim-hyperliquids.xyz, they are advised to immediately check their accounts for any unauthorized activity, especially those related to Hyperliquid or any cryptocurrency wallets. It is recommended to change passwords and enable two-factor authentication on all affected accounts. Users should also monitor their financial statements and report any suspicious transactions to their financial institutions. Additionally, users should avoid clicking on links or providing personal information on any unknown or suspicious websites.