hyperliquid[.]mba

This domain is flagged as a high-risk brand impersonation targeting Hyperliquid. Registered through Cloudflare, Inc. and secured with a Google Trust Services SSL certificate, the domain resolves to IP address 188.114.97.3. The page title, Hyperliquid Trade, directly mimics the legitimate Hyperliquid platform, which is the identified brand target. The domain is currently active and has a Gridinsoft trust score of zero out of one hundred, indicating strong automated distrust. Infrastructure analysis reveals use of Cloudflare and HTTP/3 technologies, consistent with a hosted environment designed to evade takedown. The domain appears on three security blocklists and has been flagged in twenty-three threat intelligence pulses on AlienVault OTX, confirming broad community recognition of malicious intent. VirusTotal reports that four out of ninety-five security vendors flag this domain, a moderate detection rate that nonetheless supports the risk assessment. Blocking by ScamSniffer, PhishDestroy, and BLP-Malware further corroborates the threat classification. What remains uncertain is the specific method of credential collection or the exact payload delivered to visitors, as the page content has not been fully analyzed. Defenders should immediately add this domain to blocklists, monitor for related subdomains or redirect chains, and notify the Hyperliquid security team to issue user warnings. Users who may have visited the site should be advised to reset credentials and review account activity for unauthorized access. Continuous monitoring of the IP address 188.114.97.3 and associated Cloudflare infrastructure is recommended to identify additional hostile domains under the same hosting umbrella.