hyperliquidr[.]xyz

The domain hyperliquidr.xyz is assessed with an elevated risk level due to its specific threat type of brand impersonation. Analysis indicates that this domain was used to impersonate the legitimate brand Hyperliquid, potentially to deceive users and gain unauthorized access to sensitive information or financial assets.

Infrastructure analysis reveals that hyperliquidr.xyz was registered through Squarespace Domains II LLC and resolves to the IP address 188.114.97.3. The domain was created on March 28, 2026, and has been flagged by 6 out of 95 security vendors on VirusTotal. It appears in one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust. Additionally, the domain was found in one threat intelligence pulse on AlienVault OTX. The domain is currently offline, which may suggest it has been taken down by security measures or the attackers.

Given the elevated risk and specific threat type of brand impersonation, it is recommended that users exercise extreme caution when encountering any communications or content related to hyperliquidr.xyz. Organizations should update their security awareness training to include this domain as an example of brand impersonation. Network administrators should consider implementing DNS-based blocking or adding the domain to their firewall blocklists to prevent access. Additionally, monitoring for any similar domain names or variations can help in early detection and prevention of further impersonation attempts.