# airdropped-hyperliquid.xyz — MALICIOUS

> Warning: airdropped-hyperliquid.xyz is linked to crypto drainer activity. Avoid interaction as it is currently offline but previously flagged for risks.

## Summary
PhishDestroy identifies airdropped-hyperliquid.xyz as a medium-risk crypto drainer domain. This classification is based on its association with malicious activity targeting cryptocurrency holders. Crypto drainers are designed to stealthily exfiltrate digital assets, making this domain a threat to any user engaging with it.

Supporting evidence includes the domain's creation date of October 16, 2025, and its registration through a common registrar, Web Commerce Communications Limited. The domain resolved to IP address 172.67.141.71 and was flagged by 7 out of 95 security vendors on VirusTotal, with inclusion in one security blocklist. The page titled "Just a moment..." suggests an attempt to mimic legitimate load screens or redirects, a common tactic in crypto-related scams.

Currently, airdropped-hyperliquid.xyz is offline, reducing immediate risk. Users should avoid accessing or interacting with this domain or any related links. Maintaining updated security software and exercising caution with unsolicited crypto-related sites is advised to prevent potential asset loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2025-10-16 19:09:10
- Expires: 2026-10-16 23:59:59
- Registrar: Web Commerce Communications Limited
- Country: MY
- IP: 172.67.141.71
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: alberto.ns.cloudflare.com teagan.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["alphaMountain.ai", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Lionic", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199fc57-f83e-77b8-9ed6-34fe0f226933.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6ce0a7c2-8510-4c04-804f-654b53efd6f9
- PhishDestroy: https://phishdestroy.io/domain/airdropped-hyperliquid.xyz/
- LLM endpoint: https://phishdestroy.io/domain/airdropped-hyperliquid.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdropped-hyperliquid.xyz/
Last updated: 2026-03-19