hyper[.]liqiud[.]xyz

The domain hyper.liqiud.xyz is a generic phishing site that has been taken offline. As of the latest analysis, it posed a generic phishing threat without impersonating any specific brand or employing a known drainer kit. The site is currently inactive, returning an HTTP status 530, and has been flagged by security vendors as malicious.

Technical indicators for hyper.liqiud.xyz include detection by 2 of 95 VirusTotal vendors, specifically Gridinsoft and Trustwave. The domain was created on February 21, 2026, and resolves to IP address 172.67.201.169, which is located in the United States and hosted by Cloudflare (AS13335). It appears on 1 security blocklist, PhishDestroy, and has an SSL certificate issued by WE1. Google Safe Browsing did not flag the domain. The Gridinsoft trust score is 0 out of 100, indicating high risk.

Since hyper.liqiud.xyz is now offline and did not involve a crypto drainer or credential theft, no immediate user action is required. However, if any credentials were entered on the site, users should change passwords for affected accounts and enable two-factor authentication. To report similar threats, submit the domain to security blocklists like PhishDestroy or notify hosting provider Cloudflare.