# hyperliquid-claim.app — SUSPICIOUS

> hyperliquid-claim.app impersonates Hyperliquid to steal credentials and crypto. Domain created March 26, 2026, resolved to 188.114.96.3.

## Summary
PhishDestroy identifies hyperliquid-claim.app as an active brand impersonation scam targeting Hyperliquid users. This malicious site uses deceptive branding to trick visitors into surrendering login credentials or transferring cryptocurrency to attacker-controlled wallets.  

This domain was flagged by PhishDestroy with zero detections out of 95 VirusTotal engines as of the latest scan. Research shows it was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 26, 2026, and resolves to IP address 188.114.96.3. The threat actor obtained a valid Let’s Encrypt SSL certificate to enhance credibility, making the site appear legitimate at first glance.  

If you visited hyperliquid-claim.app or entered any information, immediately revoke any session tokens or API keys shared with the site. Do not click suspicious links or download files from this domain. Report the domain to your security team and consider rotating passwords across all crypto platforms. Monitor your wallets and linked accounts for unauthorized transactions. This site remains active and poses a high risk to cryptocurrency holders who may mistake it for the official Hyperliquid platform.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2026-03-26 06:45:31
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/982fd6f9-c295-44a4-8d86-cdfca291680f
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid-claim.app/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid-claim.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid-claim.app/
Last updated: 2026-03-26