VirusTotal
1 / 89 engine detections
Ouvrir le rapport“HyperOne | Early Access”
Usurpation de Hyperliquid: hyperliquid.services — Contenu indisponible. Résumé des preuves: VirusTotal 1/89 (Gridinsoft); cloaking observed; PhishDestroy…
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
1 / 89 engine detections
Ouvrir le rapportchecked — no detections recorded
Ouvrir le rapportchecked — no match recorded
no community references
Ouvrir le rapportprovider verdict: clean
Ouvrir le rapport12 vérifié — aucun blocage
No threat flag
Ouvrir le rapportNo malicious flag
Ouvrir le rapportResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
PhishDestroy is currently investigating hyperliquid.services for potential brand impersonation. This domain poses a risk to users of Hyperliquid, as it may be used in phishing campaigns to steal credentials or private keys. The domain's 'under_investigation' status signals an elevated risk that requires user vigilance.
Our analysis reveals several key data points. The domain, created on August 06, 2025, resolves to IP address 35.214.240.206. The SSL certificate is issued by Let's Encrypt. hyperliquid.services is registered through Web Commerce Communications Limited dba WebNic.cc. As of the latest scan, VirusTotal shows a score of 0/95, meaning it hasn't been widely flagged as malicious yet. This low detection rate does not guarantee safety, especially given the recent domain creation date and the potential for targeted attacks.
Users should exercise extreme caution when interacting with hyperliquid.services or any communication claiming to be from Hyperliquid. Always verify the authenticity of websites and communications through official Hyperliquid channels. Do not enter sensitive information such as passwords or private keys on the site without independent verification. Report any suspicious activity to Hyperliquid's official support channels and PhishDestroy immediately.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns2.siteground.netmx10.antispam.mailspamprotection.compriority 10mx20.antispam.mailspamprotection.compriority 20mx30.antispam.mailspamprotection.compriority 30Location describes the IP network.
6267204391aacd666c3d452d04e85a3f9a1a63d7ea53fb485bbce763de184263Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of hyperliquid.services · checked Mar 28, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
content_divergence · unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='hyperliquid.services', port=80): Max retries exceeded with url: / (Caused by NewConnection
hyperliquid.services
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
Inconnu→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
1/89 engine detections
View sourceNo threat flag
View sourcehyperliquid.services
View sourcePD-20260328-E15E6A
Signalé par 1 membre de la communauté ; première observation le 28/03/2026
PD-20260328-E15E6A Recipient: compliance_abuse@webnic.cc Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
hyperliquid.services)Même si vous ne disposez pas de tous les détails — déposer quand même une plainte. Même des informations partielles peuvent aider les enquêtes.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerRapports de phishing récents et changements de disponibilité observés
SurveillerSurveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.