v2-hyperlquid[.]xyz

This report details the threat site v2-hyperlquid.xyz. The page title, www.www.v2-hyperlquid.xyz, combined with the scam type of impersonation, indicates the site was designed to mimic the Hyperliquid brand. The primary threat is that visitors may be deceived into providing sensitive information, such as login credentials or funds, under the false belief they are interacting with a legitimate Hyperliquid service.

Technical evidence confirms malicious activity. VirusTotal reports 6 detections out of 95 vendors. The site is flagged by alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, SOCRadar, and Trustwave. It is hosted on IP address 172.67.148.121, assigned to AS13335 Cloudflare, Inc. in the United States. The domain was registered on 2025-01-25 through registrar REGRU-RU. No SSL certificate is present, and the nameservers are austin.ns.cloudflare.com and cheryl.ns.cloudflare.com. GridinSoft assigns a trust score of 0 out of 100.

As of the time of analysis, the site is offline. The risk level is assessed as high due to the impersonation of a known brand, recent registration, low trust score, and multiple vendor flags. Users should avoid any interaction with this domain.