# hyperliquid.org.af — SUSPICIOUS

> hyperliquid.org.af impersonates the Hyperliquid brand with low-risk phishing activity. Stay cautious and avoid sharing personal data on this domain.

## Summary
PhishDestroy identifies hyperliquid.org.af as an active domain engaging in brand impersonation targeting Hyperliquid. Although the risk level is assessed as low, the domain poses a danger by misleading users into believing they are interacting with the legitimate Hyperliquid platform. Such impersonation can cause users to inadvertently disclose sensitive information or credentials.

This phishing scheme operates by mimicking the look and feel of Hyperliquid’s official presence, potentially tricking victims into entering login details or financial data. The domain was registered recently on January 14, 2026, through Web Commerce Communications WebCC, and resolves to IP address 188.114.97.3. It appears on one security blocklist and has a single detection flagged by VirusTotal out of 95 vendors, indicating some level of suspicion by security tools.

If you have visited hyperliquid.org.af, it is recommended to avoid entering any personal or financial information. Users should run a full security scan on their devices and change any passwords that might have been used on this site, especially those linked to Hyperliquid services. Monitoring accounts for unusual activity and reporting the domain to security authorities can help prevent further harm.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2026-01-14 12:16:48
- Registrar: Web Commerce Communications WebCC
- IP: 188.114.97.3
- Nameservers: arya.ns.cloudflare.com sullivan.ns.cloudflare.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/Q37VR5r1/6a986d9d5fe5.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e519390c-e0f8-4c9f-bf7c-aadfae455a78
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid.org.af/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid.org.af/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid.org.af/
Last updated: 2026-03-19