hyperliquid[.]international

hyperliquid.international is currently classified as under investigation with an active status for brand impersonation targeting the Hyperliquid brand. This specific threat type indicates that the domain is designed to deceive users by posing as the legitimate Hyperliquid entity, potentially facilitating fraud or unauthorized data collection.

The domain hyperliquid.international was created recently on December 2, 2025, and is registered through GoDaddy.com, LLC, a common registrar often abused by malicious actors due to ease of registration. The domain resolves to IP address 15.197.225.128 and uses an SSL certificate issued by GoDaddy.com, Inc., which could lend false legitimacy to the impersonation attempt. Despite its malicious intent, VirusTotal analysis shows a clean record with 0 detections out of 95 engines, indicating that detection engines have not yet flagged this threat. There is no current listing on blocklists or noted trust scores, which may allow the domain to evade standard security controls temporarily.

Given the brand impersonation threat type, users should exercise extreme caution with any communications or transactions involving hyperliquid.international. Organizations should implement domain monitoring for similar brand lookalikes and educate users about verifying official domain names before entering credentials or sensitive information. Blocking or restricting access to this domain on enterprise networks is advisable until the investigation concludes. Additionally, reporting this domain to security intelligence platforms and updating security filters can help mitigate risks associated with potential social engineering or phishing attacks leveraging this impersonation.