hyperliquis[.]com

The domain hyperliquis.com has been assessed as having an elevated risk level and is confirmed to be a brand impersonation site targeting Hyperliquid. This domain poses a significant threat to users who may be tricked into believing it is an official Hyperliquid website, potentially leading to financial loss or data compromise.

Infrastructure analysis reveals that hyperliquis.com is registered through Dynadot Inc and was created on March 28, 2026. The domain resolves to the IP address 54.215.31.113 and is currently offline. It has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of detection among security tools. The domain appears on 1 security blocklist and has a Gridinsoft trust score of 0/100, reflecting a complete lack of trust in its legitimacy. Additionally, the domain was found in 1 threat intelligence pulse on AlienVault OTX and is blocked by the PhishDestroy service. The SSL certificate used is from Let's Encrypt, which is a common choice for malicious actors due to its ease of acquisition.

To mitigate the risks associated with brand impersonation, organizations and individuals should ensure that all communications and transactions with Hyperliquid are conducted through verified and official channels. Users should be educated to verify the domain name and SSL certificate of any website purporting to be Hyperliquid. Network administrators are advised to update their security policies to include the blocking of hyperliquis.com and to monitor for any related phishing attempts or suspicious activities. Regular updates to threat intelligence feeds and security blocklists will help in identifying and blocking similar malicious domains.