hyperliquld[.]xyz-apiv3-connect[.]com

The domain hyperliquld.xyz-apiv3-connect.com was registered on February 21, 2026 and is currently listed as offline. Intelligence sources indicate that the site is being used for brand impersonation targeting Hyperliquid, as explicitly noted in the scam classification and the page title, which matches the domain itself. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy network, suggesting that defensive feeds have identified it as malicious.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk. VirusTotal analysis shows that nine of ninety‑three scanned vendors flagged the domain, providing independent corroboration of its malicious nature. The available data does not include details about hosting infrastructure, IP address, ASN, or TLS configuration, leaving those aspects unverified.

Likewise, no evidence has been published regarding the specific content or payload delivered by the site. Given the confirmed brand impersonation, low trust rating, blocklist presence, and multiple vendor detections, security teams should continue to enforce blocklist rules for hyperliquld.xyz-apiv3-connect.com, monitor for any re‑registration attempts, and incorporate the domain into endpoint and network threat‑intel feeds. Analysts should also seek additional telemetry—such as DNS query logs and SSL certificate data—to close gaps in the infrastructure profile and to support rapid mitigation if the domain resurfaces.