hyperliquid-xyz[.]top

This domain, hyperliquid-xyz.top, is an active brand impersonation site targeting Hyperliquid, as indicated by its page title 'hyperfoundation' and confirmed scam classification. Registered on March 28, 2026, through Web Commerce Communications Ltd, the domain resolves to IP address 45.252.248.191, hosted on infrastructure located in Vietnam under provider AZDIGI. Analysis reveals the use of LiteSpeed web server technology and HTTP/3 protocol, with a Let's Encrypt SSL certificate (R12) securing connections. Infrastructure review shows the domain appears on one security blocklist and is flagged by two of 94 security vendors in available scans. It is also documented in one AlienVault OTX threat intelligence pulse. The domain's nameservers are ns1.azdigi.com and ns2.azdigi.com, consistent with the hosting provider. Gridinsoft assigns a trust score of 0/100, reflecting high-risk classification. While the exact content and functionality of the site remain unanalysed, the combination of brand impersonation indicators, recent registration, and security vendor detections confirms active malicious intent. Defenders should treat this domain as high-risk infrastructure and implement blocking measures at DNS or network levels. Further investigation into associated IP ranges and hosting provider patterns may reveal additional related threats.