Is hypurr-liquidl.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, newly stood-up web property on a ".xyz" domain whose name evokes a liquidity or decentralized-finance service. The captured landing page carries the title "FASTPANEL" and only a few hundred characters of text. It presents no substantive product, company, or service description, so its apparent purpose is an interactive front end that appears to support a finance- or crypto-themed offering.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, including two tier-one security vendors, and the site is on a confirmed blacklist. Together these amount to a corroborated reputational finding rather than an isolated detection. The domain was registered only weeks before this assessment, so it has no operating history that could offset the detections. Its name suggests a liquidity-platform theme, which is the pattern typically used to lure users toward wallet or credential interactions. No specific brand impersonation or conflicting legal identity was established from the page itself, and no page-level content flags were raised. The sandbox found no wallet-drainer behavior, clipboard manipulation, hidden forms, or cloaking. However, the page generated a very high share of external network traffic, including dozens of external background requests and outbound POST calls. A few of these went to destinations outside the expected set of known services. That is unusual for a page with so little visible content and warrants caution about where user interactions or data may be sent. Evidence:

• Homepage: multiple threat-intelligence engines classify the domain as malicious or suspicious, and an external blacklist listing is confirmed.
• Domain registration: created 2026-09-07 (~0.12 years, roughly 45 days old) through NICENIC International Group Co., Limited.
• Homepage behavioral run: 36 external XHR/fetch requests and 24 external POSTs across three successful sandbox runs. Three requests went to non-whitelisted destinations, and the DOM changed substantially after interaction.
• Homepage content: the page title is "FASTPANEL" and the visible text is minimal, with no described product or operator.

Regulatory Verification Notes

The captured page discloses no operating company, licensing or registration status, jurisdiction, or terms that tie the site to an accountable legal entity. No legal or identity pages were available for assessment. Governance and ownership are opaque, and the independent identity check could not connect the site to any real-world brand or person. Because the domain is so recent, no track record is available to compensate. The site presents financial-style functionality without any supporting regulatory disclosure. No third-party broker or regulatory-database record matched this domain, so there is no external reputational context in either direction. The only technical hygiene signals are a valid, properly issued certificate and an identifiable network origin, and these do not establish legitimacy. Evidence:

• Homepage: no company name, license number, registration details, or jurisdiction is published.
• Transport encryption: a domain-validated TLS certificate issued by WE1, valid to 2026-12-06 (about 44 days remaining), which confirms encryption only and says nothing about operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party broker datasets: no match found for this domain.

What to Verify Next

Any dealings with this site should wait until the operator is identified through independent channels and the threat detections are resolved. If the site claims affiliation with an established protocol or brand, that claim should be checked against the official channels the legitimate project publishes on its own verified properties, not through links found on this site. Any claimed licensing or registration should be confirmed directly with the relevant registry. If the site is the intended destination of a link received through a message, advertisement, or social post, the sender and the link's origin should be authenticated first. Official support or contact channels should also be confirmed through an independent route. Evidence:

• Homepage: no named project, team, or official-channel reference is provided against which the site's claims could be validated.
• Domain registration: the domain is weeks old and is not an established property of any known organization.
• Threat intelligence: active detections remain in place, so any later change in status should be re-checked before the site is reconsidered.

Summary Verdict

The overall posture is critical and clearly cautionary. Corroborated external threat detections, together with a very recently created domain and no identifiable accountable operator, outweigh the modest technical hygiene signals present. The evidence does not support treating this website as legitimate or safe for sensitive interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge nodes. The true origin server could not be observed, which prevents independent confirmation of where the content is actually hosted. That also means the content could be swapped quickly without the hosting changing visibly. This protective infrastructure is a mitigating factor only. It does not offset the external threat detections, because Cloudflare serves legitimate and malicious sites alike. The young domain with sparse subdomain structure is an unconfirmed heuristic and is not treated as a confirmed risk.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection, or financial transaction. Any interaction should be limited to passive viewing from an isolated environment, and no files should be downloaded from it. Anyone who has already entered credentials or approved wallet activity here should rotate the affected passwords and revoke any wallet permissions promptly.