hyperliquid[.]gifts

hyperliquid.gifts is an impersonation scam targeting Hyperliquid. The domain is taken down and currently offline. It was flagged by 1 out of 94 vendors on VirusTotal and appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered with Tucows Domains Inc. and hosted by CloudFlare, Inc. in Canada.

The phishing site used the page title "Just a moment..." to potentially mimic legitimate loading pages, likely to deceive users into thinking they were visiting a genuine Hyperliquid site. Despite being offline now, the domain's brief activity period highlights the rapid deployment tactics used in phishing campaigns.

PhishDestroy's inclusion of hyperliquid.gifts in its blocklist underscores the threat's significance. The domain's SSL certificate was issued by Let's Encrypt, a common choice for phishing sites due to its automated and free nature. This case exemplifies how phishing domains can exploit the time gap before antivirus databases update, allowing them to operate undetected initially. The swift takedown of hyperliquid.gifts demonstrates effective threat response, yet its initial existence serves as a reminder of the persistent threat posed by phishing operations.