---
title: "Is hypurr-liquidl.xyz a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "hypurr-liquidl.xyz"
verdict: "Critical Risk"
title: "Is hypurr-liquidl.xyz a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/hypurr-liquidl.xyz
assessed: 2026-10-22
---

# Is hypurr-liquidl.xyz a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** hypurr-liquidl.xyz shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 6 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 1 months old (Most scam domains are under a year old) | Risk |
| Certificate | Encrypted connection (Issued by WE1) | Noted |
| Hosted by | CLOUDFLARENET (Server in US) | Noted |

## The page as captured


![Screenshot of the hypurr-liquidl.xyz homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/hypurr-liquidl.xyz/screenshots/first.png)

_What hypurr-liquidl.xyz served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, newly stood-up web property on a ".xyz" domain whose name evokes a liquidity or decentralized-finance service. The captured landing page carries the title "FASTPANEL" and only a few hundred characters of text. It presents no substantive product, company, or service description, so its apparent purpose is an interactive front end that appears to support a finance- or crypto-themed offering.


### Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, including two tier-one security vendors, and the site is on a confirmed **blacklist**. Together these amount to a corroborated reputational finding rather than an isolated detection. The domain was registered only weeks before this assessment, so it has no operating history that could offset the detections. Its name suggests a liquidity-platform theme, which is the pattern typically used to lure users toward wallet or credential interactions. No specific brand impersonation or conflicting legal identity was established from the page itself, and no page-level content flags were raised. The sandbox found no wallet-drainer behavior, clipboard manipulation, hidden forms, or cloaking. However, the page generated a very high share of external network traffic, including dozens of external background requests and outbound POST calls. A few of these went to destinations outside the expected set of known services. That is unusual for a page with so little visible content and warrants caution about where user interactions or data may be sent. Evidence:

- Homepage: multiple threat-intelligence engines classify the domain as malicious or suspicious, and an external blacklist listing is confirmed.
- Domain registration: created 2026-09-07 (~0.12 years, roughly 45 days old) through NICENIC International Group Co., Limited.
- Homepage behavioral run: 36 external XHR/fetch requests and 24 external POSTs across three successful sandbox runs. Three requests went to non-whitelisted destinations, and the DOM changed substantially after interaction.
- Homepage content: the page title is "FASTPANEL" and the visible text is minimal, with no described product or operator.

### Regulatory Verification Notes

The captured page discloses no operating company, licensing or registration status, jurisdiction, or terms that tie the site to an accountable legal entity. No legal or identity pages were available for assessment. Governance and ownership are opaque, and the independent identity check could not connect the site to any real-world brand or person. Because the domain is so recent, no track record is available to compensate. The site presents financial-style functionality without any supporting regulatory disclosure. No third-party broker or regulatory-database record matched this domain, so there is no external reputational context in either direction. The only technical hygiene signals are a valid, properly issued certificate and an identifiable network origin, and these do not establish legitimacy. Evidence:

- Homepage: no company name, license number, registration details, or jurisdiction is published.
- Transport encryption: a domain-validated TLS certificate issued by WE1, valid to 2026-12-06 (about 44 days remaining), which confirms encryption only and says nothing about operator identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Third-party broker datasets: no match found for this domain.

### What to Verify Next

Any dealings with this site should wait until the operator is identified through independent channels and the threat detections are resolved. If the site claims affiliation with an established protocol or brand, that claim should be checked against the official channels the legitimate project publishes on its own verified properties, not through links found on this site. Any claimed licensing or registration should be confirmed directly with the relevant registry. If the site is the intended destination of a link received through a message, advertisement, or social post, the sender and the link's origin should be authenticated first. Official support or contact channels should also be confirmed through an independent route. Evidence:

- Homepage: no named project, team, or official-channel reference is provided against which the site's claims could be validated.
- Domain registration: the domain is weeks old and is not an established property of any known organization.
- Threat intelligence: active detections remain in place, so any later change in status should be re-checked before the site is reconsidered.

### Summary Verdict

The overall posture is critical and clearly cautionary. Corroborated external threat detections, together with a very recently created domain and no identifiable accountable operator, outweigh the modest technical hygiene signals present. The evidence does not support treating this website as legitimate or safe for sensitive interaction.


### Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge nodes. The true origin server could not be observed, which prevents independent confirmation of where the content is actually hosted. That also means the content could be swapped quickly without the hosting changing visibly. This protective infrastructure is a mitigating factor only. It does not offset the external threat detections, because Cloudflare serves legitimate and malicious sites alike. The young domain with sparse subdomain structure is an unconfirmed heuristic and is not treated as a confirmed risk.


### Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection, or financial transaction. Any interaction should be limited to passive viewing from an isolated environment, and no files should be downloaded from it. Anyone who has already entered credentials or approved wallet activity here should rotate the affected passwords and revoke any wallet permissions promptly.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)
- The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`)

### 03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of hypurr-liquidl.xyz.

- The request stayed on hypurr-liquidl.xyz. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-09-07. (Noted)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::ac43:a9bb |
| Name servers | EZRA.NS.CLOUDFLARE.COM, POPPY.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-06 |
| Domain age | 0.12 years (continuous registration) |
| Domain expiry | 2027-09-07 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 6 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about hypurr-liquidl.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [revenuesite.xyz](https://trustsniffer.com/report/revenuesite.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [revenuepays.xyz](https://trustsniffer.com/report/revenuepays.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [funstreamnow.xyz](https://trustsniffer.com/report/funstreamnow.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [crates-otcdesks.xyz](https://trustsniffer.com/report/crates-otcdesks.xyz), another .xyz site assessed as critical-risk (Critical Risk, 5/100)
- [mefai-migrate.xyz](https://trustsniffer.com/report/mefai-migrate.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [migratedashboard.xyz](https://trustsniffer.com/report/migratedashboard.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [chanbnb.xyz](https://trustsniffer.com/report/chanbnb.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [musepade.xyz](https://trustsniffer.com/report/musepade.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [famous-kheer-db82b0.netlify.app](https://trustsniffer.com/report/famous-kheer-db82b0.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [usdt-bep20-check.vercel.app](https://trustsniffer.com/report/usdt-bep20-check.vercel.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/hypurr-liquidl.xyz) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/hypurr-liquidl.xyz · assessed 2026-10-22.*