# hyperliquid-trade.xyz — MALICIOUS

> Stay safe from phishing at hyperliquid-trade.xyz, a fake Hyperliquid site. Avoid sharing personal info and verify official URLs before acting.

## Summary
PhishDestroy has identified hyperliquid-trade.xyz as a medium-risk domain impersonating the legitimate Hyperliquid brand. Although currently offline, this domain was created to deceive users by mimicking a trusted service, putting visitors’ personal and financial data at risk.

This phishing scheme works by presenting a fake website that appears related to Hyperliquid, aiming to trick individuals into entering sensitive information. Despite displaying a "404 Not Found" page recently, the domain was flagged by multiple security vendors and appeared in threat intelligence feeds, signaling malicious intent during its active period.

If you have visited hyperliquid-trade.xyz, it is advised to immediately change any passwords or login credentials that may have been shared. Monitor your accounts for unusual activity and report any suspicious transactions to your service provider. Always ensure you access Hyperliquid services through official channels to avoid such scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Target brand: Hyperliquid
- Page title: 404 Not Found

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.62.20
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["journey.ns.cloudflare.com", "ned.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["alphaMountain.ai", "Certego", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb100-7bab-76ba-b628-6bd9bc9824b4.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9991c6f7-569d-41f7-bb80-d3cc42797d57
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid-trade.xyz/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid-trade.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid-trade.xyz/
Last updated: 2026-03-19