# hyperliquid.international — SUSPICIOUS

> hyperliquid.international imitates Hyperliquid to deceive users. Registered Dec 2025 via GoDaddy, posing ongoing brand impersonation risk.

## Summary
hyperliquid.international is currently classified as under investigation with an active status for brand impersonation targeting the Hyperliquid brand. This specific threat type indicates that the domain is designed to deceive users by posing as the legitimate Hyperliquid entity, potentially facilitating fraud or unauthorized data collection.

The domain hyperliquid.international was created recently on December 2, 2025, and is registered through GoDaddy.com, LLC, a common registrar often abused by malicious actors due to ease of registration. The domain resolves to IP address 15.197.225.128 and uses an SSL certificate issued by GoDaddy.com, Inc., which could lend false legitimacy to the impersonation attempt. Despite its malicious intent, VirusTotal analysis shows a clean record with 0 detections out of 95 engines, indicating that detection engines have not yet flagged this threat. There is no current listing on blocklists or noted trust scores, which may allow the domain to evade standard security controls temporarily.

Given the brand impersonation threat type, users should exercise extreme caution with any communications or transactions involving hyperliquid.international. Organizations should implement domain monitoring for similar brand lookalikes and educate users about verifying official domain names before entering credentials or sensitive information. Blocking or restricting access to this domain on enterprise networks is advisable until the investigation concludes. Additionally, reporting this domain to security intelligence platforms and updating security filters can help mitigate risks associated with potential social engineering or phishing attacks leveraging this impersonation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2025-12-02 13:00:40
- Registrar: GoDaddy.com, LLC
- IP: 15.197.225.128

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/379f51b7-86ef-493c-a83d-4f6c5a453872
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid.international/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid.international/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid.international/
Last updated: 2026-03-28