Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
kinetiq-en.web.app shows high-risk / scam indicators.
| What this site appears to be | Kinetiq is a DeFi liquid staking protocol on Hyperliquid that issues kHYPE for staked HYPE, with stated audits, a bug bounty, validator operations, institutional staking, and perpetual futures markets. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 4% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR4 | Noted |
| Hosted by | FASTLYServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a single-page landing site for "Kinetiq", presented as a DeFi liquid staking protocol on Hyperliquid. It invites visitors to stake HYPE in exchange for a liquid receipt token (kHYPE) and to trade perpetual futures markets, and it also promotes an institutional staking product. Its apparent business model is yield and fee generation from validator operations, staking and trading activity.
Scam/Impersonation Risk
This is a cautionary assessment. Several independent threat-intelligence engines currently flag the site's address as malicious, and the site is blacklisted by external reputation sources. This is the decisive risk factor and is not offset by the site's polished content. No conflicting legal identities and no brand impersonation were detected, and the page shows none of the usual credential-harvesting mechanics: no login or payment forms, no hidden forms, no clipboard manipulation, no wallet-drainer behaviour and no cloaking. The concern is therefore the reputation flag combined with what the site asks visitors to do. The homepage invites a visitor to stake HYPE for kHYPE, trade perpetual futures on equities, indices, currencies and commodities "24/7/365", and use an institutional product (iHYPE). It advertises a headline TVL of $1.09B alongside a second, different TVL figure of $983.25M, a modest 1.98% APY, 24-hour volume of $19.18M and open interest of $11.21M. It also claims eight security audits and a "$1M" bug bounty described as "the largest on Hyperliquid". None of these figures can be verified from the page, and the two TVL values are internally inconsistent. The return is generated off-page by validators, and funds must be committed before any service is delivered. The domain is a project subdomain on a shared application-hosting platform, with an "-en" suffix, rather than a dedicated brand domain. Nothing on the page ties it to an official Kinetiq presence, so a lookalike or mirror of a real protocol cannot be excluded. Four abuse reports exist against a shared content-delivery address used by the site. They reflect shared infrastructure and are weaker evidence than the malicious detections, but they remain visible. Evidence:
- Homepage: staking panel, perpetual futures module and iHYPE institutional section, with TVL stated as both $1.09B and $983.25M.
- Homepage: tokens HYPE, kHYPE, KNTQ and iHYPE are referenced, with audit and bug-bounty claims that carry no linked proof on the page.
- Reputation checks: 3 security engines classify the domain as malicious, and a blacklist hit is confirmed.
- Abuse reporting: 4 reports against the shared edge address 2620:0:890::100, attributed to shared infrastructure rather than to the site specifically.
- The domain does not match a recognized protocol listing in the DeFi directory check.
Regulatory Verification Notes
The site identifies no operating company, jurisdiction, licence or registration number, so its real-world operator is unverified. Ownership opacity is present, but it is an administrative limitation here and not an identity contradiction. The institutional section describes iHYPE as "compliant" and designed for "regulated entities and enterprises", yet it names no regulated counterparty, custodian or licence. These are unsupported assertions and should not be read as regulatory standing. No third-party broker or regulator record was matched to the site, so there is no external regulatory signal in either direction. The business model is high-risk in character: it is staking-based, yield comes from remote validator infrastructure, and the page does not itemise fee or revenue flows. Evidence:
- Homepage institutional staking section: "compliant" and "regulated entities" language with no licence, entity name or registry reference.
- No legal, terms or about pages were captured that identify an operator.
- Served from AS54113 (Fastly, Inc., US).
- TLS certificate issued by WR4 (DV), valid to 2026-12-22; this confirms encryption only and says nothing about operator identity.
What to Verify Next
Before any interaction, confirm through the protocol's own independently sourced channels (not links from this page) whether this exact address is an official Kinetiq endpoint. Compare the staking contract and token addresses for kHYPE, KNTQ and iHYPE against those published in verified protocol documentation and on-chain explorers. Check the audit reports and bug-bounty programme against the auditors' and bounty platform's own sites. Establish the legal entity behind the institutional product and confirm any claimed licence directly with the relevant registry. Evidence:
- Homepage: audit and bug-bounty claims lack verifiable links.
- Homepage: the two conflicting TVL figures need reconciling against independent on-chain data.
- Homepage: social links (X, Discord, Telegram, GitHub) should be cross-checked from the official project's own channels.
Summary Verdict
The available evidence supports a high-risk posture. Confirmed adverse external detections outweigh the site's content quality and technical hygiene. Its apparent sophistication does not establish that it is the genuine protocol, and its operator identity remains unverified.
Infrastructure Integrity
The site is delivered through a recognised CDN/WAF provider, Fastly, with a valid DV TLS certificate. Only edge addresses are observable, so independent hosting verification is not possible. This protective infrastructure is a mitigating factor only. It does not offset the reputation findings, and edge-only visibility can mask rapid content changes.
Closing Assessment
Treat the site as read-only. Do not connect a wallet, stake, trade, or enter credentials or funds here until the address is independently confirmed as official and the external malicious detections are cleared.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, registration and ownership, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
04 Behaviour in a sandbox
- Many of the responses the page received looked generated rather than served normally.Behaviour in a sandbox
rule:BEHAV_SYNTHETIC_RESPONSES_HIGH
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 4% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of kinetiq-en.web.app.
- The request stayed on kinetiq-en.web.app. It was not redirected to another domain. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 4% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about kinetiq-en.web.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.