# app.hyperswapx.exchange — MALICIOUS — Crypto Drainer (Angel Drainer)

> Warning: app.hyperswapx.exchange is a high-risk crypto drainer. Avoid interaction; the domain is offline but previously stole tokens.

## Summary
PhishDestroy identifies app.hyperswapx.exchange as a high-risk crypto drainer targeting users looking to swap tokens. The site impersonated a legitimate exchange interface to trick users into compromising their wallets.

The domain resolved to IP 198.18.6.223 and was linked to the Angel Drainer kit. It appeared on a security blocklist and was flagged by multiple VirusTotal vendors before being taken offline.

Users should avoid visiting this domain or interacting with any related links. If users suspect their wallet was compromised, they should immediately transfer assets to a new wallet and update security credentials.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Angel Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Angel Drainer
- Target brand: Hyperliquid
- Page title: Swap Tokens | HyperSwap Exchange on Hyperliquid

## Domain Intelligence
- IP: 92.60.77.168
- IP Country: NL
- IP City: Amsterdam
- IP Org: AS214557 HOSTMENOW LTD
- Nameservers: N/A
- SSL Issuer: none

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "Chong Lua Dao", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01993edf-4f98-7199-802b-a9b39c68e349.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/566e376c-a6c6-4400-bdd9-693d6300177f
- PhishDestroy: https://phishdestroy.io/domain/app.hyperswapx.exchange/
- LLM endpoint: https://phishdestroy.io/domain/app.hyperswapx.exchange/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app.hyperswapx.exchange/
Last updated: 2026-03-19