Is hyperliquidpc.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, served from a recently created domain, presents a single-page "Hyperliquid Terminal — Desktop Workstation Concept" to visitors. It borrows the name of a well-known on-chain derivatives trading platform and appears to be a trading-terminal or workstation download concept, though its operator and commercial purpose are not independently established. The site responded stably and returned a substantial amount of page text. The available evidence does not tie it to any confirmed real-world brand owner or company.

Scam/Impersonation Risk

The decisive concern is an external threat-intelligence detection. One major security vendor classifies the site as malicious, and several further engines flag it as suspicious. This is a confirmed blacklist-level signal, and it is the main reason the assessment is cautionary. The domain also embeds a recognised trading-platform brand name, and its homepage title is a "desktop workstation concept" for that platform. Combined with the very recent registration and the threat detection, this pattern matches how lookalike sites are staged to lure users into downloading software or connecting wallets. No conflicting legal entities were found, because the site discloses no entity name that could conflict. Behavioural testing across three runs found no wallet-connection prompts, wallet-draining routines, clipboard manipulation, hidden forms or credential posts to external parties. That lowers the likelihood of active theft on the pages tested, but it does not offset the external detection. The homepage generated a heavy volume of third-party requests (27 external fetch calls and 9 external POSTs, all to recognised destinations) and nine browser console errors, indicating an unfinished or loosely assembled front end. Evidence:

• The homepage title presents a "desktop workstation concept" for a named trading platform, and that brand name is embedded in the domain.
• The domain was registered on 2026-09-17 (~0.09 years, about 34 days old) through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• A single web-archive snapshot exists, dated 2026-09-18, so no meaningful operating history is visible.
• Homepage behavioural testing recorded 27 external XHR/fetch calls, 9 external POSTs and 9 console errors, with no wallet-drainer or clipboard-hijack activity observed.

Regulatory Verification Notes

No licensing, registration or regulated-entity status could be established for this site, and no third-party broker or regulator record matched it. Ownership details are opaque, and the on-page disclosure of any operating company is unclear. Here that opacity is an ownership and governance limitation, not an identity contradiction. A site that offers trading-related software should present a named legal entity and clear terms, and none can be relied upon here. The transport encryption is valid but is only a domain-validated certificate, which proves control of the domain and says nothing about who operates it. Hosting through a mainstream provider is likewise no evidence of legitimacy. Evidence:

• The TLS certificate is domain-validated (DV), issued by YE1 and valid to 2026-12-16, with 55 days remaining.
• The site is served from AS13335 (Cloudflare, Inc., US).
• The homepage and its captured pages identify no operating company, licence or registration number.
• No third-party broker-reputation record matched the domain.

What to Verify Next

Before any interaction, the site should be compared against the official channels of the trading platform whose name it uses, via that platform's own documentation and verified social accounts rather than links found on this site. Any claim that the "workstation" is an official or partner product should be confirmed with the platform operator directly. Any downloadable file from the site should be treated as untrusted. Official support and contact channels should be confirmed through an independent, offline route. The operator's identity should be established before any further engagement. Evidence:

• The homepage uses the platform's name in its title and domain, so its link to the real platform is a claim the site makes about itself.
• Domain registration is about a month old, so no established ownership record exists to cross-check.
• External detections are active against the domain, so any downloadable content should be assumed unsafe until cleared.

Summary Verdict

The site carries an elevated-risk posture. It is driven decisively by external threat detections that no amount of technical hygiene offsets, and by an unconfirmed operator identity attached to a borrowed brand name. The available evidence supports neither legitimacy nor a reliable counterparty.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server is not visible, so hosting cannot be independently verified. Bot protection is active, and testing found no cloaking, with stable responses across runs. These are mitigating hygiene factors only. They do not offset the external threat detection, and because only edge servers are visible, content could be swapped quickly without any change in hosting.

Closing Assessment

At most, the site should be viewed read-only. Wallets should not be connected. Credentials should not be entered. Nothing should be downloaded, and no financial transaction should be made through it. Any engagement with the trading platform it references should go only through that platform's independently confirmed official channels.