hyperliquid[.]com-app-v2-waliets-connect[.]com

The domain hyperliquid.com-app-v2-waliets-connect.com is a confirmed phishing site engaged in brand impersonation targeting Hyperliquid, a cryptocurrency platform. This scam site mimics the legitimate Hyperliquid brand to deceive users into interacting with fraudulent cryptocurrency-related content, posing an elevated risk of financial loss. No drainer kit was identified, but the domain was actively used for cryptocurrency phishing before being taken offline.

Technical analysis reveals hyperliquid.com-app-v2-waliets-connect.com was flagged by 1 of 95 VirusTotal security vendors, including Fortinet. The domain appears on 1 security blocklist (PhishDestroy) and was created on February 21, 2026. It resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US, and used an SSL certificate issued by WE1. The observed page title indicated a connection timeout error, and Gridinsoft assigned it a trust score of 0/100.

Users who interacted with hyperliquid.com-app-v2-waliets-connect.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.