Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
hyperlliquid[.]xyz
“43.646 | HYPE/USDC | Hyperliquid”
This report analyzes the domain hyperlliquid.xyz, an impersonation site targeting the Hyperliquid cryptocurrency platform. Based on the page title "43.646 | HYPE/USDC | Hyperliquid," the site falsely presents itself as a legitimate Hyperliquid trading interface. The threat posed is credential harvesting or financial fraud, as users may be tricked into entering login credentials or connecting wallets on this fraudulent page, leading to asset theft.
Technical evidence confirms malicious activity. VirusTotal shows 3 out of 95 security vendors detected the site as malicious. It is flagged by Forcepoint ThreatSeeker and appears on 3 blocklists. The domain was registered on 2025-05-04 via NameSilo, LLC. It resolves to IP address 104.21.56.212, hosted by Cloudflare, Inc. in Canada (CA). Nameservers are jakub.ns.cloudflare.com and kim.ns.cloudflare.com. No SSL certificate data was provided.
The domain is currently DOWN or OFFLINE, mitigating immediate risk. However, the DOM risk score of 63 indicates a high potential threat. The site remains a significant impersonation risk if reactivated. Analysts should monitor for similar domains and enforce blocklisting.
Registro de reporte enviado
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260318-677DA4- Título de la página capturada
- 42.707 | HYPE/USDC | Hyperliquid
- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Acceptable Use Policy (AUP): The domain hyperlliquid.xyz is actively engaged in phishing activities, which constitutes a direct violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain violates your TOS, which reserves the right to suspend or terminate services for any activities that are illegal or harmful to others.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is applicable as phishing schemes often involve unauthorized access to personal information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via wire communications, which is relevant to the fraudulent activities conducted through hyperlliquid.xyz.
CAN-SPAM Act (15 U.S.C. § 7701): This law regulates commercial emails and prohibits misleading headers and deceptive subject lines, which are often used in phishing attempts.
Regulatory Note: Failure to take immediate action against hyperlliquid.xyz may expose your organization to regulatory scrutiny and potential liability under applicable laws. It is imperative to act swiftly to mitigate these risks.
Inteligencia de seguridad de red Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | hyperlliquid.xyz |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes · sincronizado el 09/08/2026
Cronología de detección
Observaciones almacenadas en orden cronológico.
-
VirusTotal
VirusTotal: 0 → 1
Inteligencia comunitaria
1 reportes de la comunidad
CategoríaPHISHING
Automated report created via SEAL 911
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of hyperlliquid.xyz · checked Mar 18, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.