# app.hyperliquid.xyz — SUSPICIOUS

> app.hyperliquid.xyz is an active phishing site targeting users. Stay alert and avoid interaction. Check PhishDestroy for updates.

## Summary
PhishDestroy identifies app.hyperliquid.xyz as an active phishing domain designed to deceive users by mimicking legitimate services. This threat poses a risk of credential theft and unauthorized access, which can lead to financial loss or identity compromise. Although currently rated as low risk, its ongoing activity underscores the need for vigilance.

The domain app.hyperliquid.xyz was registered recently on February 21, 2026, and exhibits characteristics typical of hastily deployed phishing infrastructure, including a poor PageSpeed score of 18/100. VirusTotal analysis shows minimal detection, indicating that this phishing campaign may still be under the radar of most security vendors. The domain remains live and accessible, suggesting active attempts to harvest sensitive user data.

Users are advised to avoid visiting app.hyperliquid.xyz and to refrain from submitting any personal information if they encounter this site. Employing browser security tools, keeping software updated, and verifying URLs before interaction can reduce exposure. For continuous updates and to report suspicious sites, users should consult resources like PhishDestroy.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: 30.860  |  HYPE/USDC  |  Hyperliquid

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Squarespace Domains II LLC
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ns-1371.awsdns-43.org", "ns-480.awsdns-60.com", "ns-531.awsdns-02.net", "ns-1829.awsdns-36.co.uk"]
- SSL Issuer: Amazon / Amazon RSA 2048 M04

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Chong Lua Dao"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Trade 100+ perps and spot assets on Hyperliquid, a decentralized Layer 1 blockchain with fully onchain order books.

### Page Text
Hyperliquid

### External Scripts
- https://hyperliquid.statuspage.io/embed/script.js

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cef55-c610-7249-84ac-c4684f24d7d9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/710f437e-f7af-4dfc-94fa-ce94870ef307
- PhishDestroy: https://phishdestroy.io/domain/app.hyperliquid.xyz/
- LLM endpoint: https://phishdestroy.io/domain/app.hyperliquid.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app.hyperliquid.xyz/
Last updated: 2026-03-15