This phishing domain has been taken down
Confirmed dead — kept on record for forensic reference and similar-pattern matching.

hypecip[.]xin

Domain Security & Threat Intelligence Report
“Hyperliquid”
17/17 VT URLQuery: 100 Taken Down May 17, 2026 2 Blocklists 1 Report Sent Hyperliquid
Case PD-20260126-042FB0 Appeal listing
0 Risk Score
Data coverage VirusTotal 17 / 17 URLQuery 100 det. OTX 1 pulses CF Radar clean URLScan report ready DNS blocks flagged SSL valid, 49d WHOIS — Screenshot captured Redirect chain not probed CDN bypass n/a
VirusTotal
17 det.
URLQuery
100 det.
URLScan
Report ↗
SSL
R12
Age
—
Status
Dead
DestroyList
Listed
Reports Sent
1
02

Forensic brief

auto-generated · PhishDestroy AI
PhishDestroy AI
probe: May 17, 2026
score: 100/100
case: PD-20260126-042FB0
vendors17/17
urlquery100
blocklists2
Analyst brief · auto-generated

PhishDestroy identifies hypecip.xin as a high-risk generic phishing domain. The domain was associated with deceptive activity, targeting users under the guise of the page titled “Hyperliquid.” Given its classification, users should exercise extreme caution and avoid any interaction or data submission on this site. Evidence supporting the threat includes 17 security vendors flagging hypecip.xin on VirusTotal, Google Safe Browsing marking it for social engineering, and its presence on two separate security blocklists. The domain was registered relatively recently on February 21, 2026, through Gname.com Pte. Ltd., and resolves to the IP address 118.107.15.175. Additional intelligence from AlienVault OTX confirms this domain's involvement in malicious activity, contributing to its low trust score of 0/100 by Gridinsoft. Currently, hypecip.xin is taken offline, reducing immediate risk to users. Nonetheless, PhishDestroy advises users to remain vigilant for similar phishing campaigns and avoid domains with comparable characteristics. If you encounter this or related domains, do not provide personal or financial information and consider reporting the incident to appropriate cybercrime authorities.

Brand Impersonation Impersonation (Hyperliquid) brand: Hyperliquid
03

Threat response pipeline

May 17, 2026 · 1 report submitted
Discovery
Submission
Legal
Takedown
13/19
30+ Proprietary Parsers
Distributed scanning of Google Ads, SEO-manipulated results, Twitter/X, YouTube & Telegram campaigns.
Infrastructure Analysis
dnstwist & typosquatting detection against Hyperliquid.
Community Intelligence
Real-time ingestion via Telegram Bot & partner intelligence feeds.
Threat Ingested
hypecip.xin detected and queued for full analysis.
May 17, 2026
61+ Vendor Submissions
Threat data submitted to 61+ security vendors & threat-intel platforms. 17 flagged this domain.
Cloudflare Radar
View scan — verdict: clean
VirusTotal
17 / 17 vendors flagged on VirusTotal.
Google Safe Browsing
Flagged in Google Safe Browsing transparency report.
Blocklist Detection
Found in 2 blocklists: ScamSniffer, PhishDestroy.
Forensic Evidence Collection
URLScan.io, URLQuery & Cloudflare Radar — DOM snapshots, HTTP transactions, DNS & certificate data.
Registrar & Hosting Notification
Abuse report sent to Gname.com Pte. Ltd. at complaint@gname.com with forensic evidence (metadata, screenshots, PDF).
1769404638
DestroyList Published
Added to PhishDestroy/DestroyList — open-source blocklist for wallets & extensions.
Abuse Reports Sent (1)
1 abuse reports filed; 111d 0h elapsed since first report.
Open Threat Database
Real-time commits to GitHub repository & live monitoring at phishdestroy.io/live.
Social Broadcasting
Automated alerts on X, Telegram & Mastodon.
Confirmed dead
Domain confirmed taken down in 1171 hours.
May 17, 2026
04

Evidence capture

urlscan snapshot · domain intelligence

Domain Intelligence

Domainhypecip.xin
Registrar Gname.com Pte. Ltd.(SG)
Abuse contact complaint@gname.com
IP Address 118.107.15.175
ASN AS152194 · CTG Server Limited
SSL R12 · valid 49d · expires 2026-04-18
Hosting JP Tokyo , JP · AS152194 CTG Server Limited
Nameservers "b2.share-dns.net"]
Impersonates Hyperliquid · Impersonation (Hyperliquid)
Page title “Hyperliquid”
External lookups ICANN RDAP ↗ WHOIS ↗ viewdns ↗rapiddns ↗ ICANN registrars ↗
Technical details DNS, hashes, case ID
Favicon hash0ffc55afbee12bbb59fbecf7265dfec06c36b66d17b3586b99694acbe72aafa2
URLScan UUID019bf7c2-1250-714f…
Case IDPD-20260126-042FB0
08

Public blocklist status

cross-vendor confirmation
2
Listed in 2 public blocklists — confirmed by independent sources
Sources with no listing are omitted.
ScamSniffer
LISTED
PhishDestroy
LISTED
09

Technologies

Wappalyzer · Cloudflare Radar
Technologies · 4 identified
Vue.js
Nginx
HSTS
HTTP/3
Detected via Cloudflare Radar · Wappalyzer engine
10

VirusTotal consensus

17 vendors · 3-col matrix
17/17
vendors flagging
Unanimous malicious verdict

Aggregated detection across 17 security vendors.

Per-vendor breakdown not available — view raw report on VirusTotal ↗
11

Site performance

PageSpeed Insights · mobile
Site performance analysis

Google PageSpeed Insights — mobile audit of hypecip.xin

55
Needs Work
Performance
FCP
3.5
First Contentful Paint
LCP
6.73
Largest Contentful Paint
CLS
0.117
Cumulative Layout Shift
TBT
138
Total Blocking Time
SI
27.2
Speed Index
12

Evidence & external reports

cross-reference this domain
Security Analysis
URLScanurlscan.io VirusTotalvirustotal.com 17 det. URLQueryurlquery.net 100 det. S SSL Labsssllabs.com Valid CF Radarradar.cloudflare.com S ScamAdviserscamadviser.com
OSINT & Intelligence
Shodanshodan.io Censyscensys.io ThreatFoxabuse.ch IntelXintelx.io crt.shcrt.sh WHOISwhois.com Waybackweb.archive.org
14

Were you affected by this site?

immediate response · authorities

Were You Affected?

You are not alone and there is nothing to be ashamed of. Reporting is the most powerful weapon against fraud — your report can prevent others from becoming victims.
Chainabuse
Report crypto wallet or phishing URL
FBI IC3
Report internet crime (US)
Europol
Report cybercrime (EU)
Domain Appeal
Contest this listing
Beware of recovery scammers! No legitimate service will ask for upfront payment to recover stolen crypto. Learn more about recovery fraud →
15

Report to your local authorities

geo-aware · authorities · AI complaint
Your country (auto-detected)
Japan

  Email template — registrar abuse

To: complaint@gname.com, abuse@rackip.com Registrar: Gname.com Pte. Ltd. Case: PD-PD-20260126-042FB0
Open in mail client Appeal (if false-positive)

Check Any Domain

Instant threat analysis with 50+ security engines & forensic evidence.

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community.

Report

Live Threat Feed

Real-time monitoring of active phishing campaigns & takedown progress.

Monitor
16

Embed this report

iframe · sizer · CC-BY

Embed this report

Drop a live, self-updating risk widget anywhere — blog, DAO forum, Discord webhook, X post. Free, no API key, CC-BY.

hypecip[.]xin 100/100 TAKEN DOWN · 17/17 VT · 111d 0h View full report ↗
Live preview at 100% width
Canonical: https://phishdestroy.io/domain/hypecip.xin/ JSON API llm.txt
17

About this report

methodology · appeals · API

About this report: hypecip.xin

This domain security report is maintained by PhishDestroy's automated threat-intelligence pipeline. Our system continuously monitors this domain across 17 security vendors on VirusTotal and 2 public blocklists.

The site displays a page titled “Hyperliquid”.

hypecip.xin has been flagged by 17 security vendors as of May 17, 2026.

If you believe this listing is inaccurate, you can submit an appeal. For more information about our methodology, visit our FAQ page.