hyperliquiddesktop[.]store

This domain, hyperliquiddesktop.store, poses a significant threat as a brand impersonation scam targeting users of Hyperliquid. The domain mimics the official Hyperliquid desktop application with a misleading page title, "Hyperliquid Desktop App — Fast, Secure, Professional Trading," which can trick users into believing they are interacting with a legitimate service. The primary objective of this campaign is to deceive users into disclosing sensitive information, such as login credentials and financial details, which can be used for malicious purposes.

Analysis indicates that hyperliquiddesktop.store has been flagged by 3 out of 95 security vendors on VirusTotal, suggesting a low level of immediate recognition among automated detection systems. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and has been added to 3 security blocklists. Infrastructure analysis reveals that the domain resolves to the IP address 216.198.79.1 and utilizes technologies such as Vercel, LiveChat, and HSTS. The Gridinsoft trust score for this domain is 0/100, indicating a high level of mistrust and potential risk. The combination of these technical indicators and the domain's offline status points to a coordinated effort to impersonate the Hyperliquid brand.

If users have visited hyperliquiddesktop.store, they are advised to immediately change their passwords for all accounts associated with Hyperliquid and any other financial services. It is also recommended to monitor their accounts for any unauthorized activity and to report any suspicious transactions to their financial institution. Users should be cautious of unsolicited communications and verify the authenticity of any links or login pages by directly accessing the official Hyperliquid website. Additionally, users should consider using multi-factor authentication to enhance their security and protect against potential credential theft.