# hyperliquid.com.pl — SUSPICIOUS

> Phishing investigation: hyperliquid.com.pl mimics Hyperliquid crypto platform. Domain registered June 7, 2025. Check the full report.

## Summary
PhishDestroy identifies hyperliquid.com.pl as an active brand impersonation site targeting Hyperliquid, a prominent decentralized exchange. The domain was registered on June 7, 2025, through Aftermarket.pl Limited and resolves to IP 185.253.212.22. Despite using a Let's Encrypt SSL certificate, the site remains unverified and poses a credible threat to users seeking legitimate Hyperliquid services. No drainer kit has been confirmed at this stage.  

 This domain exhibits alarming alignment with Hyperliquid’s branding, exploiting trust to deceive visitors. VirusTotal reports 0/95 detections, the registrar is Aftermarket.pl Limited, and the domain is listed by 0 blocklists. The site was created just days ago, highlighting the urgency of containment. Google Safe Browsing (GSB) has not yet flagged the domain, leaving users vulnerable in the interim.  

 Current status remains under investigation with active monitoring. PhishDestroy has escalated findings to relevant authorities and blocklist maintainers for prioritized takedown. While the risk is deemed active, no user reports of compromise have been confirmed. Users are strongly advised to avoid the domain and verify all Hyperliquid URLs via official channels. Remaining risk is moderate due to low detection rates and recent registration.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2025-06-07 17:09:50
- Registrar: Aftermarket.pl Limited
- IP: 185.253.212.22

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/77ec19a0-2808-4ed3-b047-5b341301dcf1
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid.com.pl/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid.com.pl/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid.com.pl/
Last updated: 2026-03-28