# hyperliquid.se — SUSPICIOUS

> hyperliquid.se poses as Hyperliquid in a crypto drainer scam. Domain registered June 07, 2025, VirusTotal score 0/95. Block it immediately.

## Summary
PhishDestroy identifies hyperliquid.se as an active crypto drainer scam impersonating the legitimate Hyperliquid platform. This domain, created on June 07, 2025, mimics the brand’s official site to trick users into connecting wallets and approving malicious token approvals. Once connected, the drainer silently transfers assets to attacker-controlled addresses, a tactic commonly associated with clipboard malware and fake dApp interfaces.  This domain was flagged with zero detections on VirusTotal (0/95), indicating it evades most antivirus engines. It resolves to IP 185.253.212.22 and uses a Let’s Encrypt SSL certificate for legitimacy. Registered through Key-Systems GmbH, the domain is less than one week old, suggesting a fast-moving campaign targeting early adopters of decentralized trading tools.  Users who visited hyperliquid.se should revoke any wallet approvals immediately using tools like revoke.cash or Etherscan, disconnect the domain from their wallets, and scan for unauthorized transactions. Avoid re-engaging with any links or wallets connected to this domain. Report the site to the Hyperliquid team and relevant abuse channels. Remain cautious of similar domains leveraging brand trust in crypto ecosystems.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2025-06-07 00:00:00
- Registrar: Key-Systems Gmbh
- IP: 185.253.212.22

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0733ba4e-ab29-4b12-a068-a62bfe6737aa
- PhishDestroy: https://phishdestroy.io/domain/hyperliquid.se/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquid.se/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquid.se/
Last updated: 2026-03-28