Hyperliquid
Registered lookalikes
Spellings of hyperliquid.xyz registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
114 of the 436 are listed by a source or resolve to a listed address, checked hourly.
- hyperliquid.services US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .servicesReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid.services
- Domain
- hyperliquid.services
- Spelling
- The name of hyperliquid.xyz with the ending .services
- First found
- 2026-11-04 · the day the daily DNS check first found it registered
- Registered
- 2026-11-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.services · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.2.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.128.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:2452606:4700:3030::ac43:80dc
- Cloudflare
- Cloudflare (104.21.2.69, 172.67.128.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.monster US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hyperliquid.xyz · the ending .monsterListed by MetaMaskAmazon Web Services
DetailsHide details for hyperliquid.monster
- Domain
- hyperliquid.monster
- Spelling
- The name of hyperliquid.xyz with the ending .monster
- First found
- 2026-11-03 · the day the .monster zone file first listed it as a new registration
- Registered
- 2026-11-02 · Porkbun LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.monster · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyper1iquid.casaLookalike of hyperliquid.xyz · similar-looking charactersListed by MetaMaskNo address or mail server yet
DetailsHide details for hyper1iquid.casa
- Domain
- hyper1iquid.casa
- Spelling
- Spelled like hyperliquid.xyz with similar-looking characters
- First found
- 2026-11-05 · the day we first found it in the .casa zone file, already registered
- Registered
- 2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyper1iquid.casa · in the feed since 2026-11-01 11:44 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.discount US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hyperliquid.xyz · the ending .discountListed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for hyperliquid.discount
- Domain
- hyperliquid.discount
- Spelling
- The name of hyperliquid.xyz with the ending .discount
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-29 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.discount · in the feed since 2026-10-31 05:42 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.discount · in the feed since 2026-11-02 05:44 UTC
- Addresses
- 216.150.1.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.1.65, 216.150.16.129): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyeprliquid.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for hyeprliquid.trade
- Domain
- hyeprliquid.trade
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyeprliquid.trade · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.73.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:a56a2606:4700:3036::6815:49b9
- Cloudflare
- Cloudflare (104.21.73.185, 172.67.165.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyper-liquid.contact SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of hyperliquid.xyz · an added hyphenListed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for hyper-liquid.contact
- Domain
- hyper-liquid.contact
- Spelling
- Spelled like hyperliquid.xyz with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .contact zone file, already registered
- Registered
- 2026-10-02 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyper-liquid.contact · in the feed since 2026-10-27 05:34 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (hyper-liquid.contact resolved to it 2026-11-05 00:02 UTC), 172.232.24.235 (hyper-liquid.contact resolved to it 2026-11-05 00:02 UTC), 172.234.25.42 (hyper-liquid.contact resolved to it 2026-11-05 00:02 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rewards-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “rewards”Listed by MetaMaskCloudflare
DetailsHide details for rewards-hyperliquid.xyz
- Domain
- rewards-hyperliquid.xyz
- Spelling
- The name of hyperliquid.xyz with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rewards-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.76.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:bf182606:4700:3035::6815:4c4a
- Cloudflare
- Cloudflare (104.21.76.74, 172.67.191.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.camLookalike of hyperliquid.xyz · the ending .camReported by PhishDestroyNo address or mail server yet
DetailsHide details for hyperliquid.cam
- Domain
- hyperliquid.cam
- Spelling
- The name of hyperliquid.xyz with the ending .cam
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-15 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.cam · in the feed since 2026-11-03 21:22 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqauid.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyParking page · Afternic
DetailsHide details for hyperliqauid.xyz
- Domain
- hyperliqauid.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-14 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliqauid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hyperliqauid.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.page US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .pageListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.page
- Domain
- hyperliquid.page
- Spelling
- The name of hyperliquid.xyz with the ending .page
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-11 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.page · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.145.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:912d2606:4700:3033::6815:217e
- Cloudflare
- Cloudflare (104.21.33.126, 172.67.145.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- airdrop-hyperliquid.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hyperliquid.xyz · the name with the word “airdrop”Listed by MetaMaskParking page · Afternic
DetailsHide details for airdrop-hyperliquid.xyz
- Domain
- airdrop-hyperliquid.xyz
- Spelling
- The name of hyperliquid.xyz with the word “airdrop”
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · airdrop-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates airdrop-hyperliquid.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.casino SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of hyperliquid.xyz · the ending .casino3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for hyperliquid.casino
- Domain
- hyperliquid.casino
- Spelling
- The name of hyperliquid.xyz with the ending .casino
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-10 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (hyperliquid.casino resolved to it 2026-11-05 04:46 UTC), 172.232.24.235 (hyperliquid.casino resolved to it 2026-11-05 04:46 UTC), 172.234.25.42 (hyperliquid.casino resolved to it 2026-11-05 04:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.world US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .worldListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.world
- Domain
- hyperliquid.world
- Spelling
- The name of hyperliquid.xyz with the ending .world
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-10 · Web Commerce Communications Limited dba WebNic.cc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.world · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.76.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:4c622606:4700:3037::ac43:c0ac
- Cloudflare
- Cloudflare (104.21.76.98, 172.67.192.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.lol US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .lolReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid.lol
- Domain
- hyperliquid.lol
- Spelling
- The name of hyperliquid.xyz with the ending .lol
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.lol · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.92.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.199.97 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:c7612606:4700:3035::6815:5ce4
- Cloudflare
- Cloudflare (104.21.92.228, 172.67.199.97): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperlipuid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · a changed characterReported by PhishDestroyCloudflare
DetailsHide details for hyperlipuid.xyz
- Domain
- hyperlipuid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-31 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperlipuid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.73.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8c1e2606:4700:3032::6815:492a
- Cloudflare
- Cloudflare (104.21.73.42, 172.67.140.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rewards-hyperliquid.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “rewards”Listed by MetaMaskCloudflare
DetailsHide details for rewards-hyperliquid.app
- Domain
- rewards-hyperliquid.app
- Spelling
- The name of hyperliquid.xyz with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-08-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rewards-hyperliquid.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.70.224 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:46e02606:4700:3035::ac43:8c26
- Cloudflare
- Cloudflare (104.21.70.224, 172.67.140.38): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-claim-airdrop.live DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of hyperliquid.xyz · the name with the word “claim-airdrop”Listed by MetaMaskParking page · ParkingCrew (Team Internet)
DetailsHide details for hyperliquid-claim-airdrop.live
- Domain
- hyperliquid-claim-airdrop.live
- Spelling
- The name of hyperliquid.xyz with the word “claim-airdrop”
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-24 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-claim-airdrop.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-airdrop.claims US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “airdrop”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-airdrop.claims
- Domain
- hyperliquid-airdrop.claims
- Spelling
- The name of hyperliquid.xyz with the word “airdrop”
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-08-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-airdrop.claims · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.35.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.178.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:b2982606:4700:3034::6815:23bb
- Cloudflare
- Cloudflare (104.21.35.187, 172.67.178.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.com.lc US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .com.lcListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.com.lc
- Domain
- hyperliquid.com.lc
- Spelling
- The name of hyperliquid.xyz with the ending .com.lc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-12 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.com.lc · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.94.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.219.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:dba02606:4700:3031::6815:5e2d
- Cloudflare
- Cloudflare (104.21.94.45, 172.67.219.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.xin US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .xinListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.xin
- Domain
- hyperliquid.xin
- Spelling
- The name of hyperliquid.xyz with the ending .xin
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-08 · NameMart Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.xin · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.13.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.133.110 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:856e2606:4700:3035::6815:dec
- Cloudflare
- Cloudflare (104.21.13.236, 172.67.133.110): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperilquid.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · similar-looking charactersReported by PhishDestroyCloudflare
DetailsHide details for hyperilquid.pro
- Domain
- hyperilquid.pro
- Spelling
- Spelled like hyperliquid.xyz with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperilquid.pro · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.25.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:86692606:4700:3036::6815:19ab
- Cloudflare
- Cloudflare (104.21.25.171, 172.67.134.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.center US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .centerListed by MetaMaskSubdomain reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid.center
- Domain
- hyperliquid.center
- Spelling
- The name of hyperliquid.xyz with the ending .center
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-05 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.center · in the feed since 2026-10-27 05:34 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · app.hyperliquid.center under hyperliquid.center · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.80.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:50dd2606:4700:3037::ac43:bb4a
- Cloudflare
- Cloudflare (104.21.80.221, 172.67.187.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-rewards.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “rewards”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-rewards.trade
- Domain
- hyperliquid-rewards.trade
- Spelling
- The name of hyperliquid.xyz with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2026-08-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-rewards.trade · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.37.136 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.105 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:d0692606:4700:3037::6815:2588
- Cloudflare
- Cloudflare (104.21.37.136, 172.67.208.105): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.llc US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .llcListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.llc
- Domain
- hyperliquid.llc
- Spelling
- The name of hyperliquid.xyz with the ending .llc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-04 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.llc · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.83.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:53ed2606:4700:3037::ac43:b773
- Cloudflare
- Cloudflare (104.21.83.237, 172.67.183.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-reward.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “reward”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-reward.app
- Domain
- hyperliquid-reward.app
- Spelling
- The name of hyperliquid.xyz with the word “reward”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-07-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-reward.app · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-reward.app · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.85.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:55bf2606:4700:3035::ac43:d18c
- Cloudflare
- Cloudflare (104.21.85.191, 172.67.209.140): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperlequid.xyz US · AS16509 · Amazon.com, Inc.Lookalike of hyperliquid.xyz · a changed characterReported by PhishDestroyParking page · Dynadot parking
DetailsHide details for hyperlequid.xyz
- Domain
- hyperlequid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-03 · Dynadot0 LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperlequid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-claiming.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “claiming”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-claiming.app
- Domain
- hyperliquid-claiming.app
- Spelling
- The name of hyperliquid.xyz with the word “claiming”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-claiming.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.61 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:8db82606:4700:3035::6815:213d
- Cloudflare
- Cloudflare (104.21.33.61, 172.67.141.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-rewards.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “rewards”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-rewards.app
- Domain
- hyperliquid-rewards.app
- Spelling
- The name of hyperliquid.xyz with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-06-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-rewards.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.18.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.181.133 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:12592606:4700:3034::ac43:b585
- Cloudflare
- Cloudflare (104.21.18.89, 172.67.181.133): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- chyperliquid.xyzLookalike of hyperliquid.xyz · an added characterListed by MetaMaskSubdomain reported by PhishDestroy
DetailsHide details for chyperliquid.xyz
- Domain
- chyperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · chyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · app.chyperliquid.xyz under chyperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- rhyperliquid.xyzLookalike of hyperliquid.xyz · an added characterListed by MetaMaskSubdomain reported by PhishDestroy
DetailsHide details for rhyperliquid.xyz
- Domain
- rhyperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rhyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · app.rhyperliquid.xyz under rhyperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- huperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyCloudflare
DetailsHide details for huperliquid.xyz
- Domain
- huperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-20 · Dynadot17 LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · huperliquid.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.53.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:35b62606:4700:3036::ac43:d81c
- Cloudflare
- Cloudflare (104.21.53.182, 172.67.216.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--hyperliqud-f9a.xyz FR · AS16276 · OVH OVH SAS2 addressesLookalike of hyperliquid.xyz · international characters, shown as hyperliquïd.xyzListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listOVHMX present
DetailsHide details for xn--hyperliqud-f9a.xyz
- Domain
- xn--hyperliqud-f9a.xyz
- Spelling
- Spelled like hyperliquid.xyz with international characters, shown as hyperliquïd.xyz
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-19 · OVH sas
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · xn--hyperliqud-f9a.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · xn--hyperliqud-f9a.xyz · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 51.91.236.255 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · xn--hyperliqud-f9a.xyz resolved to it 2026-11-04 16:29 UTC
- Addresses
- 51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)2001:41d0:301::29
- OVH
- OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.one US · AS14061 · DigitalOcean, LLCLookalike of hyperliquid.xyz · the ending .oneAddress on DomainSpoof’s phishing-host listPhishDestroy CommunityDigitalOceanMX present
DetailsHide details for hyperliquid.one
- Domain
- hyperliquid.one
- Spelling
- The name of hyperliquid.xyz with the ending .one
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-18 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 165.22.123.139 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.one resolved to it 2026-11-05 04:46 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 165.22.123.139 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (165.22.123.139): a cloud provider. It rents servers and addresses to its customers.
- MX
- hyperliquid.one
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--hyperlquid-p8a.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · international characters, shown as hyperlíquid.xyzListed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for xn--hyperlquid-p8a.xyz
- Domain
- xn--hyperlquid-p8a.xyz
- Spelling
- Spelled like hyperliquid.xyz with international characters, shown as hyperlíquid.xyz
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · xn--hyperlquid-p8a.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.39.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.171.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:27e82606:4700:3030::ac43:abd3
- Cloudflare
- Cloudflare (104.21.39.232, 172.67.171.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperlliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · a doubled letterReported by PhishDestroyCloudflare
DetailsHide details for hyperlliquid.xyz
- Domain
- hyperlliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-14 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperlliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.72.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.181.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:b51c2606:4700:3035::6815:4863
- Cloudflare
- Cloudflare (104.21.72.99, 172.67.181.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyqerliquid.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · a changed characterListed by MetaMaskCloudflare
DetailsHide details for hyqerliquid.live
- Domain
- hyqerliquid.live
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-06-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyqerliquid.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.21.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:150d2606:4700:3035::ac43:c3ab
- Cloudflare
- Cloudflare (104.21.21.13, 172.67.195.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperilquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyCloudflare
DetailsHide details for hyperilquid.xyz
- Domain
- hyperilquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-11 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperilquid.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.58.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.168.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a80b2606:4700:3036::6815:3a42
- Cloudflare
- Cloudflare (104.21.58.66, 172.67.168.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hpyerliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyCloudflare
DetailsHide details for hpyerliquid.xyz
- Domain
- hpyerliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-08 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hpyerliquid.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.91.150 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.223.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:df702606:4700:3035::6815:5b96
- Cloudflare
- Cloudflare (104.21.91.150, 172.67.223.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqiud.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyCloudflare
DetailsHide details for hyperliqiud.xyz
- Domain
- hyperliqiud.xyz
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-08 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliqiud.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.74.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.164.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:a4502606:4700:3036::6815:4ae7
- Cloudflare
- Cloudflare (104.21.74.231, 172.67.164.80): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- haperliquid.xyzLookalike of hyperliquid.xyz · a changed characterReported by PhishDestroyNo address or mail server yet
DetailsHide details for haperliquid.xyz
- Domain
- haperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-02 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · haperliquid.xyz · in the feed since 2026-11-03 21:22 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.ltd US · AS14618 · Amazon.com, Inc.2 addressesLookalike of hyperliquid.xyz · the ending .ltdListed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for hyperliquid.ltd
- Domain
- hyperliquid.ltd
- Spelling
- The name of hyperliquid.xyz with the ending .ltd
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-05-27 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.ltd · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.ltd · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 18.208.88.157 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)98.84.224.111 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (18.208.88.157, 98.84.224.111): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliiquid.wtf DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hyperliquid.xyz · a doubled letterListed by MetaMaskReported by PhishDestroyParking page · Sedo
DetailsHide details for hyperliiquid.wtf
- Domain
- hyperliiquid.wtf
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .wtf zone file, already registered
- Registered
- 2026-05-24 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliiquid.wtf · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliiquid.wtf · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperiiquid.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · similar-looking charactersListed by MetaMaskCloudflare
DetailsHide details for hyperiiquid.com
- Domain
- hyperiiquid.com
- Spelling
- Spelled like hyperliquid.xyz with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-14 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperiiquid.com · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.13.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.200.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:c8d52606:4700:3032::6815:da7
- Cloudflare
- Cloudflare (104.21.13.167, 172.67.200.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquida.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterListed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for hyperliquida.org
- Domain
- hyperliquida.org
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-13 · July Name Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquida.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquida.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.60.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.193.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:3c452606:4700:3035::ac43:c162
- Cloudflare
- Cloudflare (104.21.60.69, 172.67.193.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqiud.digital US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for hyperliqiud.digital
- Domain
- hyperliqiud.digital
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-05-09 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliqiud.digital · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.22.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:ceed2606:4700:3034::6815:16ce
- Cloudflare
- Cloudflare (104.21.22.206, 172.67.206.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hypreliquid.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyCloudflare
DetailsHide details for hypreliquid.live
- Domain
- hypreliquid.live
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-03-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hypreliquid.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.15.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.162.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:a2312606:4700:3036::6815:f6d
- Cloudflare
- Cloudflare (104.21.15.109, 172.67.162.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquld.store US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · similar-looking charactersReported by PhishDestroyCloudflare
DetailsHide details for hyperliquld.store
- Domain
- hyperliquld.store
- Spelling
- Spelled like hyperliquid.xyz with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-03-16 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquld.store · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.47.78 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:aac52606:4700:3037::6815:2f4e
- Cloudflare
- Cloudflare (104.21.47.78, 172.67.170.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claimhyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with an added wordReported by PhishDestroyCloudflare
DetailsHide details for claimhyperliquid.org
- Domain
- claimhyperliquid.org
- Spelling
- The name of hyperliquid.xyz with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-03-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · claimhyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.34.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.148 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:22d52606:4700:3035::ac43:a594
- Cloudflare
- Cloudflare (104.21.34.213, 172.67.165.148): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-hyperilquid.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · similar-looking charactersListed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for app-hyperilquid.org
- Domain
- app-hyperilquid.org
- Spelling
- Spelled like hyperliquid.xyz with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-03-09 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-hyperilquid.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · app-hyperilquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.43.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.178.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b2222606:4700:3035::6815:2b68
- Cloudflare
- Cloudflare (104.21.43.104, 172.67.178.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- airdrop-hyperliquid.money US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “airdrop”Reported by PhishDestroyCloudflare
DetailsHide details for airdrop-hyperliquid.money
- Domain
- airdrop-hyperliquid.money
- Spelling
- The name of hyperliquid.xyz with the word “airdrop”
- First found
- 2026-11-01 · the day we first found it in the .money zone file, already registered
- Registered
- 2026-03-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · airdrop-hyperliquid.money · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.93.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:5d592606:4700:3036::ac43:d035
- Cloudflare
- Cloudflare (104.21.93.89, 172.67.208.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.watch FR · AS16276 · OVH OVH SASLookalike of hyperliquid.xyz · the ending .watchAddress on DomainSpoof’s phishing-host listOVH
DetailsHide details for hyperliquid.watch
- Domain
- hyperliquid.watch
- Spelling
- The name of hyperliquid.xyz with the ending .watch
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-08 · Key-Systems, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 198.50.252.64 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.watch resolved to it 2026-11-05 04:46 UTC
- Addresses
- 198.50.252.64 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (198.50.252.64): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ghyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyCloudflare
DetailsHide details for ghyperliquid.xyz
- Domain
- ghyperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-03-04 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · ghyperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.5.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.154.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:5902606:4700:3037::ac43:9aa8
- Cloudflare
- Cloudflare (104.21.5.144, 172.67.154.168): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperkliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyCloudflare
DetailsHide details for hyperkliquid.xyz
- Domain
- hyperkliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-03-04 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperkliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.86.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.48 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:56572606:4700:3034::ac43:d930
- Cloudflare
- Cloudflare (104.21.86.87, 172.67.217.48): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidx.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyCloudflare
DetailsHide details for hyperliquidx.live
- Domain
- hyperliquidx.live
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquidx.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.30.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.174.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:ae352606:4700:3033::6815:1ef4
- Cloudflare
- Cloudflare (104.21.30.244, 172.67.174.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.stream US · AS16509 · Amazon.com, Inc.Lookalike of hyperliquid.xyz · the ending .streamListed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for hyperliquid.stream
- Domain
- hyperliquid.stream
- Spelling
- The name of hyperliquid.xyz with the ending .stream
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-02-16 · Porkbun
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.stream · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.stream · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 216.150.1.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.1.1): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claim-hyperliquid.info US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “claim”Reported by PhishDestroyCloudflare
DetailsHide details for claim-hyperliquid.info
- Domain
- claim-hyperliquid.info
- Spelling
- The name of hyperliquid.xyz with the word “claim”
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-02-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · claim-hyperliquid.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.40.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:28fd2606:4700:3037::ac43:8d0d
- Cloudflare
- Cloudflare (104.21.40.253, 172.67.141.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.money DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesLookalike of hyperliquid.xyz · the ending .money5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for hyperliquid.money
- Domain
- hyperliquid.money
- Spelling
- The name of hyperliquid.xyz with the ending .money
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-02-06 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (hyperliquid.money resolved to it 2026-11-05 04:46 UTC), 46.62.237.138 (hyperliquid.money resolved to it 2026-11-05 04:46 UTC), 5.161.230.87 (hyperliquid.money resolved to it 2026-11-05 04:46 UTC), 5.161.47.86 (hyperliquid.money resolved to it 2026-11-05 04:46 UTC), 5.78.156.59 (hyperliquid.money resolved to it 2026-11-05 04:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f18:6a07:601:6471:b5e4:ef15:3b722600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:611d:872c:66c0:1a5f2a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:faf3:c47f:324e:16bd2a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidd.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · a doubled letterListed by MetaMaskCloudflare
DetailsHide details for hyperliquidd.com
- Domain
- hyperliquidd.com
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-02-02 · Porkbun LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquidd.com · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.43.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:2bdd2606:4700:3035::ac43:ba62
- Cloudflare
- Cloudflare (104.21.43.221, 172.67.186.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquids.claims US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyCloudflare
DetailsHide details for hyperliquids.claims
- Domain
- hyperliquids.claims
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-01-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquids.claims · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.31.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b08a2606:4700:3037::6815:1f83
- Cloudflare
- Cloudflare (104.21.31.131, 172.67.176.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- airdrop-hyperliquid.claims US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “airdrop”Reported by PhishDestroyCloudflare
DetailsHide details for airdrop-hyperliquid.claims
- Domain
- airdrop-hyperliquid.claims
- Spelling
- The name of hyperliquid.xyz with the word “airdrop”
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-01-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · airdrop-hyperliquid.claims · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.33.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.147.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:21b22606:4700:3033::ac43:93ad
- Cloudflare
- Cloudflare (104.21.33.178, 172.67.147.173): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claim-hyperliquid.finance US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “claim”Reported by PhishDestroyCloudflare
DetailsHide details for claim-hyperliquid.finance
- Domain
- claim-hyperliquid.finance
- Spelling
- The name of hyperliquid.xyz with the word “claim”
- First found
- 2026-11-01 · the day we first found it in the .finance zone file, already registered
- Registered
- 2026-01-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · claim-hyperliquid.finance · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.59.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:3bd92606:4700:3033::ac43:b892
- Cloudflare
- Cloudflare (104.21.59.217, 172.67.184.146): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyper-liquid.network US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added hyphenReported by PhishDestroyCloudflare
DetailsHide details for hyper-liquid.network
- Domain
- hyper-liquid.network
- Spelling
- Spelled like hyperliquid.xyz with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .network zone file, already registered
- Registered
- 2025-12-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyper-liquid.network · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.96.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.181.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:608d2606:4700:3033::ac43:b5ee
- Cloudflare
- Cloudflare (104.21.96.141, 172.67.181.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gift-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “gift”Reported by PhishDestroyCloudflare
DetailsHide details for gift-hyperliquid.org
- Domain
- gift-hyperliquid.org
- Spelling
- The name of hyperliquid.xyz with the word “gift”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-12-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · gift-hyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.52.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.194.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:34262606:4700:3037::ac43:c2cb
- Cloudflare
- Cloudflare (104.21.52.38, 172.67.194.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.sale US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .saleReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid.sale
- Domain
- hyperliquid.sale
- Spelling
- The name of hyperliquid.xyz with the ending .sale
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.sale · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.17.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.178.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:11f32606:4700:3032::ac43:b2e1
- Cloudflare
- Cloudflare (104.21.17.243, 172.67.178.225): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyper-liquid.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added hyphenReported by PhishDestroyCloudflare
DetailsHide details for hyper-liquid.trade
- Domain
- hyper-liquid.trade
- Spelling
- Spelled like hyperliquid.xyz with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2025-12-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyper-liquid.trade · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.21.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.196.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:15222606:4700:3037::ac43:c459
- Cloudflare
- Cloudflare (104.21.21.34, 172.67.196.89): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.in US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .inListed by MetaMaskCloudflare
DetailsHide details for hyperliquid.in
- Domain
- hyperliquid.in
- Spelling
- The name of hyperliquid.xyz with the ending .in
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-08 · Endurance International Group India Private Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.in · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.7.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:87a62606:4700:3037::6815:718
- Cloudflare
- Cloudflare (104.21.7.24, 172.67.135.166): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.club US · AS16509 · Amazon.com, Inc.Lookalike of hyperliquid.xyz · the ending .clubReported by PhishDestroyParking page · Dynadot parking
DetailsHide details for hyperliquid.club
- Domain
- hyperliquid.club
- Spelling
- The name of hyperliquid.xyz with the ending .club
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-04 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.club · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claim-hyperliquid.network US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the name with the word “claim”Reported by PhishDestroyCloudflare
DetailsHide details for claim-hyperliquid.network
- Domain
- claim-hyperliquid.network
- Spelling
- The name of hyperliquid.xyz with the word “claim”
- First found
- 2026-11-01 · the day we first found it in the .network zone file, already registered
- Registered
- 2025-11-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · claim-hyperliquid.network · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.0.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.223.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:562606:4700:3034::ac43:dfac
- Cloudflare
- Cloudflare (104.21.0.86, 172.67.223.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hypreliquid.appLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyNo address or mail server yet
DetailsHide details for hypreliquid.app
- Domain
- hypreliquid.app
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-14 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hypreliquid.app · in the feed since 2026-11-03 21:22 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.mba US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · the ending .mbaReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid.mba
- Domain
- hyperliquid.mba
- Spelling
- The name of hyperliquid.xyz with the ending .mba
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-05 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.mba · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.15.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:a1102606:4700:3037::6815:f1b
- Cloudflare
- Cloudflare (104.21.15.27, 172.67.161.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidr.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hyperliquid.xyz · an added characterReported by PhishDestroyCloudflare
DetailsHide details for hyperliquidr.xyz
- Domain
- hyperliquidr.xyz
- Spelling
- Spelled like hyperliquid.xyz with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-10-28 · Squarespace Domains II LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquidr.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.16.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.167.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:10632606:4700:3035::ac43:a739
- Cloudflare
- Cloudflare (104.21.16.99, 172.67.167.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.broker NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .brokerAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.broker
- Domain
- hyperliquid.broker
- Spelling
- The name of hyperliquid.xyz with the ending .broker
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.broker resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.investments NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .investmentsAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.investments
- Domain
- hyperliquid.investments
- Spelling
- The name of hyperliquid.xyz with the ending .investments
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.investments resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.report NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .reportAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.report
- Domain
- hyperliquid.report
- Spelling
- The name of hyperliquid.xyz with the ending .report
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.report resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.ventures NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .venturesAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.ventures
- Domain
- hyperliquid.ventures
- Spelling
- The name of hyperliquid.xyz with the ending .ventures
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.ventures resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.zip NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .zipAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.zip
- Domain
- hyperliquid.zip
- Spelling
- The name of hyperliquid.xyz with the ending .zip
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-20 · Namecheap Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.zip resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.wtf NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · the ending .wtfReported by PhishDestroyAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid.wtf
- Domain
- hyperliquid.wtf
- Spelling
- The name of hyperliquid.xyz with the ending .wtf
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-14 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.wtf · in the feed since 2026-11-03 21:22 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.wtf resolved to it 2026-11-05 04:46 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- zyperliquid.xyz NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · a changed characterAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for zyperliquid.xyz
- Domain
- zyperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-10-12 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zyperliquid.xyz resolved to it 2026-11-05 00:02 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperlrquid.app NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of hyperliquid.xyz · a changed characterAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperlrquid.app
- Domain
- hyperlrquid.app
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-10-07 · Namecheap Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperlrquid.app resolved to it 2026-11-05 00:02 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hjperliquid.xyz AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a changed characterReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hjperliquid.xyz
- Domain
- hjperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hjperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hjperliquid.xyz to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqkid.xyz AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a changed characterReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliqkid.xyz
- Domain
- hyperliqkid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliqkid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.142 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliqkid.xyz to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.142): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hgperliquid.xyz AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hgperliquid.xyz
- Domain
- hgperliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hgperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hgperliquid.xyz to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqhid.xyz AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliqhid.xyz
- Domain
- hyperliqhid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliqhid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliqhid.xyz to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliqudi.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliqudi.com
- Domain
- hyperliqudi.com
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliqudi.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.142 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliqudi.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.142): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquif.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliquif.com
- Domain
- hyperliquif.com
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquif.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliquif.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquis.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliquis.com
- Domain
- hyperliquis.com
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquis.com · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 103.224.212.142 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliquis.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.142): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquod.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliquod.com
- Domain
- hyperliquod.com
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquod.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliquod.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquud.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliquud.com
- Domain
- hyperliquud.com
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquud.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliquud.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquuid.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a doubled letterReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hyperliquuid.com
- Domain
- hyperliquuid.com
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquuid.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hyperliquuid.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hypsrliquid.xyz AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · a letter from a neighbouring keyReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for hypsrliquid.xyz
- Domain
- hypsrliquid.xyz
- Spelling
- Spelled like hyperliquid.xyz with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hypsrliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.142 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hypsrliquid.xyz to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.142): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- yhperliquid.com AU · AS133618 · Trellian Pty. LimitedLookalike of hyperliquid.xyz · two letters swappedReported by PhishDestroyParking page · Above.comMX present
DetailsHide details for yhperliquid.com
- Domain
- yhperliquid.com
- Spelling
- Spelled like hyperliquid.xyz with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · yhperliquid.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 103.224.212.141 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates yhperliquid.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.141): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hypperliquid.com CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of hyperliquid.xyz · a doubled letterAddress on DomainSpoof’s phishing-host listAlibaba Cloud
DetailsHide details for hypperliquid.com
- Domain
- hypperliquid.com
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-08-18 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 47.76.45.78 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hypperliquid.com resolved to it 2026-11-04 16:29 UTC
- Addresses
- 47.76.45.78 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
- Alibaba Cloud
- Alibaba Cloud (47.76.45.78): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.dev PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of hyperliquid.xyz · the ending .devReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for hyperliquid.dev
- Domain
- hyperliquid.dev
- Spelling
- The name of hyperliquid.xyz with the ending .dev
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-07-07 · Key-Systems LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.dev · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.dev resolved to it 2026-11-05 04:46 UTC
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- MX
- blackhole.aftermarket.pl
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.cm PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of hyperliquid.xyz · the ending .cmReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for hyperliquid.cm
- Domain
- hyperliquid.cm
- Spelling
- The name of hyperliquid.xyz with the ending .cm
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-06-07 · Netcom.cm Sarl
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.cm · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.cm resolved to it 2026-11-05 04:46 UTC
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- MX
- blackhole.aftermarket.pl
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.com.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of hyperliquid.xyz · the ending .com.plReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for hyperliquid.com.pl
- Domain
- hyperliquid.com.pl
- Spelling
- The name of hyperliquid.xyz with the ending .com.pl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-06-07 · Aftermarket.pl Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.com.pl · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.com.pl resolved to it 2026-11-05 04:46 UTC
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- MX
- blackhole.aftermarket.pl
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.cz PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of hyperliquid.xyz · the ending .czReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for hyperliquid.cz
- Domain
- hyperliquid.cz
- Spelling
- The name of hyperliquid.xyz with the ending .cz
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-06-07 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.cz · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.cz resolved to it 2026-11-05 04:46 UTC
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- MX
- blackhole.aftermarket.pl
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.trade DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of hyperliquid.xyz · the ending .tradeReported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for hyperliquid.trade
- Domain
- hyperliquid.trade
- Spelling
- The name of hyperliquid.xyz with the ending .trade
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-06-03 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.trade · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 74.208.236.134 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.trade resolved to it 2026-11-05 04:46 UTC
- Addresses
- 74.208.236.134 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::200
- IONOS
- IONOS (74.208.236.134): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidd.xyz US · AS16509 · Amazon.com, Inc.Lookalike of hyperliquid.xyz · a doubled letterReported by PhishDestroyParking page · Dynadot parking
DetailsHide details for hyperliquidd.xyz
- Domain
- hyperliquidd.xyz
- Spelling
- Spelled like hyperliquid.xyz with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-05-08 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquidd.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.tv CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of hyperliquid.xyz · the ending .tvReported by PhishDestroyAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hyperliquid.tv
- Domain
- hyperliquid.tv
- Spelling
- The name of hyperliquid.xyz with the ending .tv
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-12-24 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid.tv · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 91.108.122.248 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid.tv resolved to it 2026-11-05 04:46 UTC
- Addresses
- 91.108.122.248 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (91.108.122.248): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid.wiki US · AS14061 · DigitalOcean, LLCLookalike of hyperliquid.xyz · the ending .wikiListed by MetaMaskDigitalOceanMX present
DetailsHide details for hyperliquid.wiki
- Domain
- hyperliquid.wiki
- Spelling
- The name of hyperliquid.xyz with the ending .wiki
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-12-17 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid.wiki · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 165.22.82.10 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (165.22.82.10): a cloud provider. It rents servers and addresses to its customers.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Hyperliquid's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 112 shown: listed ones first, then the newest registrations.
- policy-hyperliquidgov.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for policy-hyperliquidgov.icu
- Domain
- policy-hyperliquidgov.icu
- Match
- A new registration containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-04 · the day the .icu zone file first listed it as a new registration
- Registered
- 2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · policy-hyperliquidgov.icu · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.87.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.171.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:57f82606:4700:3037::ac43:ab89
- Cloudflare
- Cloudflare (104.21.87.248, 172.67.171.137): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-foundation.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-foundation.app
- Domain
- hyperliquid-foundation.app
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-10-29 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-foundation.app · in the feed since 2026-11-02 11:46 UTC
- Addresses
- 104.21.84.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:54b12606:4700:3031::ac43:c373
- Cloudflare
- Cloudflare (104.21.84.177, 172.67.195.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-genesis.claims US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-genesis.claims
- Domain
- hyperliquid-genesis.claims
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-10-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-genesis.claims · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-genesis.claims · in the feed since 2026-10-28 05:34 UTC
- Addresses
- 104.21.91.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d0dc2606:4700:3034::6815:5b1b
- Cloudflare
- Cloudflare (104.21.91.27, 172.67.208.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-claims.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-claims.app
- Domain
- hyperliquid-claims.app
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-claims.app · in the feed since 2026-10-28 05:34 UTC
- Addresses
- 104.21.52.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:c6352606:4700:3037::6815:3470
- Cloudflare
- Cloudflare (104.21.52.112, 172.67.198.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- eng-hyperliquid.org SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …Contains “hyperliquid”Listed by MetaMaskAddress on DomainSpoof’s phishing-host list
DetailsHide details for eng-hyperliquid.org
- Domain
- eng-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-10-19 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · eng-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 31.220.1.30 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · eng-hyperliquid.org resolved to it 2026-11-05 00:02 UTC
- Addresses
- 31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- eu-hyperliquid.org SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …Contains “hyperliquid”Address on DomainSpoof’s phishing-host list
DetailsHide details for eu-hyperliquid.org
- Domain
- eu-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-10-19 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 31.220.1.30 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · eu-hyperliquid.org resolved to it 2026-11-05 00:02 UTC
- Addresses
- 31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquiddev.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Reported by PhishDestroyParking page · Afternic
DetailsHide details for hyperliquiddev.xyz
- Domain
- hyperliquiddev.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquiddev.xyz · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hyperliquiddev.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- token-hyperliquid.appContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for token-hyperliquid.app
- Domain
- token-hyperliquid.app
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-09-28 · Tucows Domains Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · token-hyperliquid.app · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- genesis-hyperliquid.claims US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for genesis-hyperliquid.claims
- Domain
- genesis-hyperliquid.claims
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-09-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · genesis-hyperliquid.claims · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.83.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.157 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:b79d2606:4700:3037::6815:53f7
- Cloudflare
- Cloudflare (104.21.83.247, 172.67.183.157): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- webapp-hyperliquid.xyzContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for webapp-hyperliquid.xyz
- Domain
- webapp-hyperliquid.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · webapp-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- register-hyperliquid.cfd US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for register-hyperliquid.cfd
- Domain
- register-hyperliquid.cfd
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .cfd zone file, already registered
- Registered
- 2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · register-hyperliquid.cfd · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · register-hyperliquid.cfd · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.21.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:15862606:4700:3036::ac43:c6d6
- Cloudflare
- Cloudflare (104.21.21.134, 172.67.198.214): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-hyperliquid.top MD · AS200019 · AlexHost ALEXHOST S.R.L.Contains “hyperliquid”Address on DomainSpoof’s phishing-host listRegistry lookup queuedMX present
DetailsHide details for snapshot-hyperliquid.top
- Domain
- snapshot-hyperliquid.top
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 217.156.64.144 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-hyperliquid.top resolved to it 2026-11-05 00:02 UTC
- Addresses
- 217.156.64.144 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- MX
- mail.snapshot-hyperliquid.top
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- genesis-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for genesis-hyperliquid.xyz
- Domain
- genesis-hyperliquid.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · genesis-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.75.192 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:4bc02606:4700:3037::ac43:b4e2
- Cloudflare
- Cloudflare (104.21.75.192, 172.67.180.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- signup-hyperliquid.info US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for signup-hyperliquid.info
- Domain
- signup-hyperliquid.info
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-31 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · signup-hyperliquid.info · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · signup-hyperliquid.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.41.146 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:bf3a2606:4700:3037::6815:2992
- Cloudflare
- Cloudflare (104.21.41.146, 172.67.191.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- connects-hyperliquid.xyzContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for connects-hyperliquid.xyz
- Domain
- connects-hyperliquid.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-30 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · connects-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-points.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-points.pro
- Domain
- hyperliquid-points.pro
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-06 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-points.pro · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.85.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.212.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d4fb2606:4700:3033::6815:55f7
- Cloudflare
- Cloudflare (104.21.85.247, 172.67.212.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- distribution-hyperliquid.info US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for distribution-hyperliquid.info
- Domain
- distribution-hyperliquid.info
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-03 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · distribution-hyperliquid.info · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · distribution-hyperliquid.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.54.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.168.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:363a2606:4700:3036::ac43:a819
- Cloudflare
- Cloudflare (104.21.54.58, 172.67.168.25): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vote-hyperliquid.info US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for vote-hyperliquid.info
- Domain
- vote-hyperliquid.info
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-08-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · vote-hyperliquid.info · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · vote-hyperliquid.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.33.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:21a72606:4700:3036::ac43:a508
- Cloudflare
- Cloudflare (104.21.33.167, 172.67.165.8): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- my-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for my-hyperliquid.org
- Domain
- my-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · my-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · my-hyperliquid.org · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.9.219 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:a15a2606:4700:3034::6815:9db
- Cloudflare
- Cloudflare (104.21.9.219, 172.67.161.90): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- en-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for en-hyperliquid.org
- Domain
- en-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · en-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.63.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.150.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:96602606:4700:3036::6815:3fd4
- Cloudflare
- Cloudflare (104.21.63.212, 172.67.150.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- us-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for us-hyperliquid.org
- Domain
- us-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-07-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · us-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · us-hyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.53.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.213.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:35872606:4700:3033::ac43:d520
- Cloudflare
- Cloudflare (104.21.53.135, 172.67.213.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-sol.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-sol.xyz
- Domain
- hyperliquid-sol.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-21 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-sol.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.44.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.192.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:2c0d2606:4700:3035::ac43:c0cc
- Cloudflare
- Cloudflare (104.21.44.13, 172.67.192.204): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-solana.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-solana.xyz
- Domain
- hyperliquid-solana.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-21 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-solana.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.20.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:140a2606:4700:3033::ac43:bec3
- Cloudflare
- Cloudflare (104.21.20.10, 172.67.190.195): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-claimed.orgContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for hyperliquid-claimed.org
- Domain
- hyperliquid-claimed.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-06-19 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-claimed.org · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-allocation.orgContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for hyperliquid-allocation.org
- Domain
- hyperliquid-allocation.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-06-17 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-allocation.org · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wwwhyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for wwwhyperliquid.xyz
- Domain
- wwwhyperliquid.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-08 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · wwwhyperliquid.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.31.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:1f5c2606:4700:3033::ac43:b02a
- Cloudflare
- Cloudflare (104.21.31.92, 172.67.176.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-distribute.org FR · AS16276 · OVH OVH SASContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyParking page · emailverification.info suspended-domain page
DetailsHide details for hyperliquid-distribute.org
- Domain
- hyperliquid-distribute.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-06-02 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-distribute.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-distribute.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 94.23.162.163 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates hyperliquid-distribute.org to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (94.23.162.163): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- drops-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for drops-hyperliquid.xyz
- Domain
- drops-hyperliquid.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-24 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · drops-hyperliquid.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.52.194 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:cb382606:4700:3037::6815:34c2
- Cloudflare
- Cloudflare (104.21.52.194, 172.67.203.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- direct-hyperliquid.org FR · AS16276 · OVH OVH SASContains “hyperliquid”Listed by MetaMaskParking page · emailverification.info suspended-domain page
DetailsHide details for direct-hyperliquid.org
- Domain
- direct-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-23 · Key-Systems GmbH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · direct-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 94.23.162.163 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates direct-hyperliquid.org to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (94.23.162.163): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-web.orgContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for hyperliquid-web.org
- Domain
- hyperliquid-web.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-17 · Internet Domain Service BS Corp
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-web.org · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-eligibility.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for hyperliquid-eligibility.xyz
- Domain
- hyperliquid-eligibility.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-eligibility.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.27.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1bb12606:4700:3030::ac43:8f6a
- Cloudflare
- Cloudflare (104.21.27.177, 172.67.143.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- treasury-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskCloudflare
DetailsHide details for treasury-hyperliquid.org
- Domain
- treasury-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-12 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · treasury-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.69.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.153 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:d6992606:4700:3037::6815:45e4
- Cloudflare
- Cloudflare (104.21.69.228, 172.67.214.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xyz-hyperliquid.orgContains “hyperliquid”Listed by MetaMaskNo address or mail server yet
DetailsHide details for xyz-hyperliquid.org
- Domain
- xyz-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-11 · Internet Domain Service BS Corp
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · xyz-hyperliquid.org · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- apptrade-hyperliquid.xyz CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addressesContains “hyperliquid”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for apptrade-hyperliquid.xyz
- Domain
- apptrade-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-06 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 46.202.172.210 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · apptrade-hyperliquid.xyz resolved to it 2026-11-05 00:02 UTC
- Addresses
- 46.202.172.210 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)2a02:4780:27:2005:0:1bd1:f981:10
- Hostinger
- Hostinger (46.202.172.210): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-events.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-events.app
- Domain
- hyperliquid-events.app
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-04-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-events.app · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-events.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.64.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.135 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:40c52606:4700:3035::ac43:9b87
- Cloudflare
- Cloudflare (104.21.64.197, 172.67.155.135): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-xyz.top VN · AS63760 · AZDIGI CorporationContains “hyperliquid”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for hyperliquid-xyz.top
- Domain
- hyperliquid-xyz.top
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-03-16 · Web Commerce Communications Ltd
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-xyz.top · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 45.252.248.191 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid-xyz.top resolved to it 2026-11-05 00:02 UTC
- Addresses
- 45.252.248.191 · Vietnam · AS63760 AZDIGI-AS-VN - AZDIGI Corporation
- MX
- hyperliquid-xyz.top
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidapp.live US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for hyperliquidapp.live
- Domain
- hyperliquidapp.live
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-07 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquidapp.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquidapp.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.198.79.1, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- asset-hyperliquid.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for asset-hyperliquid.app
- Domain
- asset-hyperliquid.app
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-01-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · asset-hyperliquid.app · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.71.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:ac642606:4700:3034::6815:47f3
- Cloudflare
- Cloudflare (104.21.71.243, 172.67.172.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-box.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-box.xyz
- Domain
- hyperliquid-box.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-01-12 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-box.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.79.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.169.104 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a9682606:4700:3033::6815:4f54
- Cloudflare
- Cloudflare (104.21.79.84, 172.67.169.104): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- holiday-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for holiday-hyperliquid.org
- Domain
- holiday-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-12-24 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · holiday-hyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.72.236 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:48ec2606:4700:3036::ac43:bbd3
- Cloudflare
- Cloudflare (104.21.72.236, 172.67.187.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-v2.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Listed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-v2.org
- Domain
- hyperliquid-v2.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-12-12 · Porkbun LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · hyperliquid-v2.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-v2.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.69.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:d0062606:4700:3037::6815:457b
- Cloudflare
- Cloudflare (104.21.69.123, 172.67.208.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- trade-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for trade-hyperliquid.org
- Domain
- trade-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-12-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · trade-hyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.89.143 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.160.220 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:598f2606:4700:3032::ac43:a0dc
- Cloudflare
- Cloudflare (104.21.89.143, 172.67.160.220): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- treasury-hyperliquid.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for treasury-hyperliquid.pro
- Domain
- treasury-hyperliquid.pro
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2025-12-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · treasury-hyperliquid.pro · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.90.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.161.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a1122606:4700:3031::6815:5ac7
- Cloudflare
- Cloudflare (104.21.90.199, 172.67.161.18): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- treasury-hyperliquid.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for treasury-hyperliquid.icu
- Domain
- treasury-hyperliquid.icu
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .icu zone file copy it was found in
- Registered
- 2025-12-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · treasury-hyperliquid.icu · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.83.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.240 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:53382606:4700:3035::ac43:d6f0
- Cloudflare
- Cloudflare (104.21.83.56, 172.67.214.240): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-dash.orgContains “hyperliquid”Reported by PhishDestroyNo address or mail server yet
DetailsHide details for hyperliquid-dash.org
- Domain
- hyperliquid-dash.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-12-11 · Tucows Domains Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-dash.org · in the feed since 2026-11-03 21:22 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-hyperliquid-xyz.info US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for app-hyperliquid-xyz.info
- Domain
- app-hyperliquid-xyz.info
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-12-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · app-hyperliquid-xyz.info · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.30.88 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.172.175 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:acaf2606:4700:3037::6815:1e58
- Cloudflare
- Cloudflare (104.21.30.88, 172.67.172.175): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- genesis-hyperliquid.fun US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for genesis-hyperliquid.fun
- Domain
- genesis-hyperliquid.fun
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .fun zone file, already registered
- Registered
- 2025-11-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · genesis-hyperliquid.fun · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.14.126 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:cb5b2606:4700:3034::6815:e7e
- Cloudflare
- Cloudflare (104.21.14.126, 172.67.203.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- genesis-hyperliquid.trade US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for genesis-hyperliquid.trade
- Domain
- genesis-hyperliquid.trade
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2025-11-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · genesis-hyperliquid.trade · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.50.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.207.196 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:cfc42606:4700:3036::6815:32b6
- Cloudflare
- Cloudflare (104.21.50.182, 172.67.207.196): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-event.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquid-event.org
- Domain
- hyperliquid-event.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-11-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-event.org · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 104.21.66.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.168.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:42472606:4700:3037::ac43:a810
- Cloudflare
- Cloudflare (104.21.66.71, 172.67.168.16): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claims-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for claims-hyperliquid.org
- Domain
- claims-hyperliquid.org
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · claims-hyperliquid.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.234 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:d7ea2606:4700:3034::6815:10cd
- Cloudflare
- Cloudflare (104.21.16.205, 172.67.215.234): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-tr.xyz NL · AS49981 · WorldStream WorldStream B.V.2 addressesContains “hyperliquid”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for hyperliquid-tr.xyz
- Domain
- hyperliquid-tr.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-10-28 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquid-tr.xyz · in the feed since 2026-11-03 21:22 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquid-tr.xyz resolved to it 2026-11-05 00:02 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquides.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Reported by PhishDestroyCloudflare
DetailsHide details for hyperliquides.xyz
- Domain
- hyperliquides.xyz
- Match
- A domain containing “hyperliquid”, one of the names we match for Hyperliquid
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-03-27 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · hyperliquides.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.18.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.183.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b7562606:4700:3037::6815:12cc
- Cloudflare
- Cloudflare (104.21.18.204, 172.67.183.86): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidmarket.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hyperliquid”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hyperliquidmarket.org
- Domain
- hyperliquidmarket.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-12-01 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquidmarket.org resolved to it 2026-11-05 00:02 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidmarket.xyz CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hyperliquid”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hyperliquidmarket.xyz
- Domain
- hyperliquidmarket.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2024-12-01 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyperliquidmarket.xyz resolved to it 2026-11-05 00:02 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- govern-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Registry lookup queuedCloudflare
DetailsHide details for govern-hyperliquid.xyz
- Domain
- govern-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.68.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:44da2606:4700:3036::ac43:c6f7
- Cloudflare
- Cloudflare (104.21.68.218, 172.67.198.247): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-foundation.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-foundation.org
- Domain
- hyperliquid-foundation.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-10-26 · Key-Systems GmbH
- Addresses
- 104.21.50.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.157.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:32312606:4700:3036::ac43:9d1c
- Cloudflare
- Cloudflare (104.21.50.49, 172.67.157.28): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidapps.site US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”CloudflareMX present
DetailsHide details for hyperliquidapps.site
- Domain
- hyperliquidapps.site
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-10-23 · NameCheap, Inc.
- Addresses
- 104.21.93.37 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.204.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:cc372606:4700:3037::6815:5d25
- Cloudflare
- Cloudflare (104.21.93.37, 172.67.204.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- get-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for get-hyperliquid.org
- Domain
- get-hyperliquid.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-10-14 · Key-Systems GmbH
- Addresses
- 104.21.58.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.209.158 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:3ae22606:4700:3034::ac43:d19e
- Cloudflare
- Cloudflare (104.21.58.226, 172.67.209.158): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-tokendrop.xyzContains “hyperliquid”No address or mail server yet
DetailsHide details for hyperliquid-tokendrop.xyz
- Domain
- hyperliquid-tokendrop.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquiddefi.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Registry lookup queuedAmazon Web Services
DetailsHide details for hyperliquiddefi.xyz
- Domain
- hyperliquiddefi.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-10 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidoptions.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Registry lookup queuedAmazon Web Services
DetailsHide details for hyperliquidoptions.xyz
- Domain
- hyperliquidoptions.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-10 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidtradefi.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web Services
DetailsHide details for hyperliquidtradefi.xyz
- Domain
- hyperliquidtradefi.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-10-10 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-token.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-token.xyz
- Domain
- hyperliquid-token.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.19.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:be372606:4700:3037::6815:13d4
- Cloudflare
- Cloudflare (104.21.19.212, 172.67.190.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-genesis.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-genesis.app
- Domain
- hyperliquid-genesis.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-09-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.26.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.40 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:87282606:4700:3034::6815:1a14
- Cloudflare
- Cloudflare (104.21.26.20, 172.67.135.40): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidperps.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Registry lookup queuedAmazon Web Services
DetailsHide details for hyperliquidperps.xyz
- Domain
- hyperliquidperps.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-18 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-live.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-live.xyz
- Domain
- hyperliquid-live.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-17 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.36.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.200.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:24dd2606:4700:3033::ac43:c803
- Cloudflare
- Cloudflare (104.21.36.221, 172.67.200.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- genesis-hyperliquid.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for genesis-hyperliquid.app
- Domain
- genesis-hyperliquid.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-09-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.72.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.151.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:489a2606:4700:3035::ac43:97d1
- Cloudflare
- Cloudflare (104.21.72.154, 172.67.151.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- check-hyperliquid.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Parking page · Afternic
DetailsHide details for check-hyperliquid.xyz
- Domain
- check-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates check-hyperliquid.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-us.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Parking page · Afternic
DetailsHide details for hyperliquid-us.xyz
- Domain
- hyperliquid-us.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hyperliquid-us.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- web3-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for web3-hyperliquid.xyz
- Domain
- web3-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-09-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.51.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.221.218 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:ddda2606:4700:3035::6815:333c
- Cloudflare
- Cloudflare (104.21.51.60, 172.67.221.218): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidxyz.cfd US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Registry lookup queuedCloudflare
DetailsHide details for hyperliquidxyz.cfd
- Domain
- hyperliquidxyz.cfd
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .cfd zone file copy it was found in
- Registered
- 2026-09-01 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.52.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.194.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:34142606:4700:3037::ac43:c24b
- Cloudflare
- Cloudflare (104.21.52.20, 172.67.194.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- allocation-hyperliquid.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for allocation-hyperliquid.app
- Domain
- allocation-hyperliquid.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-08-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.26.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1a362606:4700:3037::ac43:877b
- Cloudflare
- Cloudflare (104.21.26.54, 172.67.135.123): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- dashboard-hyperliquid.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for dashboard-hyperliquid.app
- Domain
- dashboard-hyperliquid.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-08-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.57.128 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:39802606:4700:3034::ac43:a3e3
- Cloudflare
- Cloudflare (104.21.57.128, 172.67.163.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- dex-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for dex-hyperliquid.org
- Domain
- dex-hyperliquid.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.19.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:bacd2606:4700:3033::6815:139c
- Cloudflare
- Cloudflare (104.21.19.156, 172.67.186.205): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- bd-hyperliquid.xyz US · AS22612 · Namecheap, Inc.Contains “hyperliquid”Parking page · Namecheap parking
DetailsHide details for bd-hyperliquid.xyz
- Domain
- bd-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-26 · NameCheap, Inc.
- Addresses
- 192.64.119.45 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (192.64.119.45): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-interface-hyperliquid.xyzContains “hyperliquid”No address or mail server yet
DetailsHide details for app-interface-hyperliquid.xyz
- Domain
- app-interface-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-25 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidmobile.app US · AS53831 · Squarespace, Inc.4 addressesContains “hyperliquid”Squarespace
DetailsHide details for hyperliquidmobile.app
- Domain
- hyperliquidmobile.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-07-23 · Squarespace Domains II LLC.
- Addresses
- 198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
- Daily check
- Ended 2026-11-04 22:41 UTC
- devhyperliquid.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Parking page · Afternic
DetailsHide details for devhyperliquid.xyz
- Domain
- devhyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-06 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates devhyperliquid.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- daohyperliquid.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Parking page · Afternic
DetailsHide details for daohyperliquid.xyz
- Domain
- daohyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-04 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates daohyperliquid.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquiddao.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Parking page · Afternic
DetailsHide details for hyperliquiddao.xyz
- Domain
- hyperliquiddao.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-07-04 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hyperliquiddao.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- v2hyperliquid.xyzContains “hyperliquid”
DetailsHide details for v2hyperliquid.xyz
- Domain
- v2hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-06-27 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-allocation.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-allocation.app
- Domain
- hyperliquid-allocation.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-06-23 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.63.17 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.142.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:3f112606:4700:3033::ac43:8e67
- Cloudflare
- Cloudflare (104.21.63.17, 172.67.142.103): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- v1-hyperliquid.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for v1-hyperliquid.xyz
- Domain
- v1-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-06-19 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-hyperliquid-portal.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for app-hyperliquid-portal.xyz
- Domain
- app-hyperliquid-portal.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-06-10 · Ultahost, Inc.
- Addresses
- 104.21.49.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:31ba2606:4700:3032::ac43:a5e3
- Cloudflare
- Cloudflare (104.21.49.186, 172.67.165.227): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-app.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for hyperliquid-app.xyz
- Domain
- hyperliquid-app.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-06-02 · Gname.com Pte. Ltd.
- Addresses
- 104.21.31.137 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:1f892606:4700:3031::ac43:b0d9
- Cloudflare
- Cloudflare (104.21.31.137, 172.67.176.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- drop-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for drop-hyperliquid.xyz
- Domain
- drop-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-29 · Global Domain Group LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.50.80 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.159.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:32502606:4700:3037::ac43:9f7a
- Cloudflare
- Cloudflare (104.21.50.80, 172.67.159.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- foundation-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for foundation-hyperliquid.xyz
- Domain
- foundation-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-23 · Atak Domain Bilgi Teknolojileri A.Ş.
- Addresses
- 104.21.93.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d07d2606:4700:3036::6815:5d5c
- Cloudflare
- Cloudflare (104.21.93.92, 172.67.208.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquid-distribution.org FR · AS16276 · OVH OVH SASContains “hyperliquid”Parking page · emailverification.info suspended-domain page
DetailsHide details for hyperliquid-distribution.org
- Domain
- hyperliquid-distribution.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-05-18 · Key-Systems GmbH
- Addresses
- 94.23.162.163 · France · AS16276 OVH OVH SAS · emailverification.info suspended-domain page (parking page)
- Parking page · emailverification.info suspended-domain page
- The registry delegates hyperliquid-distribution.org to emailverification.info suspended-domain page’s nameservers, which answer for it. emailverification.info suspended-domain page (94.23.162.163): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidapp.sbsContains “hyperliquid”No address or mail server yet
DetailsHide details for hyperliquidapp.sbs
- Domain
- hyperliquidapp.sbs
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-05-17 · Dynadot Inc
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidpro.app US · AS53831 · Squarespace, Inc.4 addressesContains “hyperliquid”Squarespace
DetailsHide details for hyperliquidpro.app
- Domain
- hyperliquidpro.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-05-13 · Squarespace Domains II LLC.
- Addresses
- 198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
- Daily check
- Ended 2026-11-04 22:41 UTC
- eligibility-hyperliquid.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for eligibility-hyperliquid.xyz
- Domain
- eligibility-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.26.168 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.137.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:89642606:4700:3035::6815:1aa8
- Cloudflare
- Cloudflare (104.21.26.168, 172.67.137.100): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- admin-hyperliquid.xyz US · AS22612 · Namecheap, Inc.Contains “hyperliquid”Parking page · Namecheap parkingMX present
DetailsHide details for admin-hyperliquid.xyz
- Domain
- admin-hyperliquid.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-05-06 · NameCheap, Inc.
- Addresses
- 192.64.119.12 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (192.64.119.12): a parking service. It answers for names that are typically for sale or unused.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- distribution-hyperliquid.appContains “hyperliquid”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for distribution-hyperliquid.app
- Domain
- distribution-hyperliquid.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-04-20 · Tucows Domains Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claimed-hyperliquid.org US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”Cloudflare
DetailsHide details for claimed-hyperliquid.org
- Domain
- claimed-hyperliquid.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-04-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.64.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:40bd2606:4700:3037::ac43:bb5f
- Cloudflare
- Cloudflare (104.21.64.189, 172.67.187.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidfr.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “hyperliquid”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for hyperliquidfr.xyz
- Domain
- hyperliquidfr.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-03-25 · GoDaddy.com, LLC
- Addresses
- 216.150.1.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.1.1, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidapp.org US · AS22612 · Namecheap, Inc.Contains “hyperliquid”Parking page · Namecheap parkingMX present
DetailsHide details for hyperliquidapp.org
- Domain
- hyperliquidapp.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-03-17 · NameCheap, Inc.
- Addresses
- 192.64.119.194 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (192.64.119.194): a parking service. It answers for names that are typically for sale or unused.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidapp.xyz US · AS22612 · Namecheap, Inc.Contains “hyperliquid”PhishDestroy CommunitySuspicious · mediumParking page · Namecheap parkingMX present
DetailsHide details for hyperliquidapp.xyz
- Domain
- hyperliquidapp.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-03-17 · NameCheap, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 162.255.119.220 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (162.255.119.220): a parking service. It answers for names that are typically for sale or unused.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidmarkets.org US · AS22612 · Namecheap, Inc.Contains “hyperliquid”Parking page · Namecheap parkingMX present
DetailsHide details for hyperliquidmarkets.org
- Domain
- hyperliquidmarkets.org
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-03-17 · NameCheap, Inc.
- Addresses
- 162.255.119.57 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (162.255.119.57): a parking service. It answers for names that are typically for sale or unused.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidmarkets.xyz US · AS22612 · Namecheap, Inc.Contains “hyperliquid”Parking page · Namecheap parkingMX present
DetailsHide details for hyperliquidmarkets.xyz
- Domain
- hyperliquidmarkets.xyz
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-03-17 · NameCheap, Inc.
- Addresses
- 162.255.119.140 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (162.255.119.140): a parking service. It answers for names that are typically for sale or unused.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hyperliquidfi.app US · AS13335 · Cloudflare, Inc.4 addressesContains “hyperliquid”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for hyperliquidfi.app
- Domain
- hyperliquidfi.app
- Match
- A registered domain containing “hyperliquid”, one of the names we match for Hyperliquid
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-03-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.14.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.160.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a0d42606:4700:3031::6815:efa
- Cloudflare
- Cloudflare (104.21.14.250, 172.67.160.212): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
