# hyperliquid.online — SUSPICIOUS

> Hyperliquid users beware! hyperliquid.online is impersonating the Hyperliquid brand. Created June 2025, it poses an elevated risk. Check the full report.

## Summary
PhishDestroy has identified hyperliquid.online as a brand impersonation scam targeting Hyperliquid users. The domain actively attempts to deceive users into believing it is a legitimate Hyperliquid service, potentially to steal credentials or cryptocurrency. This is a common tactic employed by malicious actors to exploit the trust associated with established brands.  

Technical analysis reveals that hyperliquid.online was created on June 08, 2025, and is registered through Key-Systems LLC. The domain resolves to IP address 185.253.212.22. Currently, VirusTotal reports a score of 1/95 security vendors flagging the domain as malicious. The domain's SSL certificate was issued by Let's Encrypt, a common provider for both legitimate and malicious sites.  

Currently, hyperliquid.online is active and poses an elevated risk to users. Immediate action is recommended, including blocking the domain on network security devices and reporting it to relevant authorities. Users should exercise extreme caution when encountering this domain and avoid entering any personal information or credentials. Continuous monitoring is necessary to detect any changes in the domain's behavior or associated infrastructure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2025-06-08 09:57:04
- Registrar: Key-Systems LLC
- IP: 185.253.212.22

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/844d3b9c-db67-4b26-aba9-7013ce21dfbb
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid.online/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid.online/
Last updated: 2026-03-28