inspects-hyperliquid[.]xyz

This domain, inspects-hyperliquid.xyz, poses as a legitimate Hyperliquid Ethereum portfolio tracker to deceive users into disclosing sensitive wallet credentials or transferring cryptocurrency assets. The site mimics the appearance and functionality of authentic Ethereum-based financial tools, specifically targeting users who rely on portfolio management platforms. Visitors may be prompted to connect their digital wallets or enter private keys under the pretense of accessing enhanced tracking features, which would result in immediate asset theft or unauthorized transactions. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. Security vendors on VirusTotal flagged the domain as malicious, with 5 out of 95 engines detecting it as a threat. The domain appears on four distinct security blocklists and is actively blocked by major cryptocurrency security tools, including MetaMask and ScamSniffer. The page title, 'H​​​​y​​​per​​​​li​​​​​qui​​​​​d | Por​​tfol​​io Tr​​​ack​​​er,' contains obfuscated characters, a common tactic to evade automated detection systems and increase the likelihood of bypassing user scrutiny. If you visited inspects-hyperliquid.xyz or interacted with its content, immediately disconnect any connected wallets from the site and revoke any permissions granted. Monitor your wallet for unauthorized transactions and consider transferring assets to a new, secure wallet if you entered private keys or seed phrases. Report the domain to relevant security platforms and cryptocurrency exchanges to aid in broader mitigation efforts. Enable multi-factor authentication on all financial and cryptocurrency accounts to add an additional layer of security against future threats.