hyperliquiid[.]co[.]com

This domain, hyperliquiid.co.com, was identified as a brand impersonation threat targeting Hyperliquid, a brand associated with digital trading or cryptocurrency. The domain was created on February 21, 2026, and as of the report date of July 24, 2026, it is offline. The page title observed was 'Hyperliquiid: Physics and Chemistry of Liquids Exploration,' which suggests an attempt to disguise the site as a scientific resource while the domain name closely mimics the legitimate Hyperliquid brand. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, hosted in the United States under AS13335 Cloudflare, Inc. The SSL certificate used is from WE1.

The domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal scanning by 93 vendors returned zero current detections, though absence of detections is not proof the domain is safe; it may indicate limited scanning exposure or recent takedown. The domain was taken offline prior to this report's publication. Defenders should note that while the site is currently inactive, the domain infrastructure (Cloudflare hosting, a single blocklist presence, and low vendor detection) could be reused for future campaigns.

Monitoring for any domain re-registration or new IP associations under the same registrar is advised. No further details on the website's content, login forms, or phishing kit were available at the time of analysis, but the brand impersonation classification and domain naming pattern indicate a deliberate attempt to deceive users of Hyperliquid. Investigators should verify any ongoing threats by checking updated blocklists and certificate transparency logs for certificates issued to this domain.