hyperliquides[.]xyz

The domain hyperliquides.xyz has been identified as a brand impersonation threat specifically targeting Hyperliquid. The page title, 'Loading...', is a common tactic used in fraudulent sites to mislead users and delay detection. The domain was designed to mimic the legitimate Hyperliquid brand, which raises the risk of phishing attacks aimed at stealing personal or financial information from unsuspecting users.

Detailed technical analysis reveals that hyperliquides.xyz was flagged by 8 out of 95 security vendors on VirusTotal, indicating a significant risk level. The domain was created on March 28, 2026, and registered through NameSilo, LLC. It resolves to the IP address 104.21.18.204. As a further indication of its malicious nature, the domain appears on one security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which is noteworthy as it may provide a false sense of legitimacy to users.

As of the latest status update, the domain hyperliquides.xyz has been taken offline, mitigating its immediate threat. However, the domain's presence in a threat intelligence pulse on AlienVault OTX suggests that similar domains may still pose a risk. Continuous monitoring for any reemergence or related suspicious domains is advised. Users are recommended to maintain vigilance and use security tools capable of detecting similar threats to prevent potential compromise by other impersonation attempts.