# hyperliquidex.xyz — SUSPICIOUS

> hyperliquidex.xyz is a crypto drainer impersonating Hyperliquid. VirusTotal flags 3/95 vendors. Verify on PhishDestroy before use.

## Summary
PhishDestroy identifies hyperliquidex.xyz as a crypto drainer masquerading as Hyperliquid, a legitimate decentralized exchange platform. This domain was flagged due to its clear intent to deceive users into connecting crypto wallets under false pretenses, likely for asset theft. The site leverages brand impersonation to appear credible, targeting individuals familiar with Hyperliquid’s services.

Evidence supporting this assessment includes a VirusTotal detection rate of 3 out of 95 security vendors as of the latest scan. The domain was registered through NameSilo, LLC on February 08, 2026, and resolves to IP 84.32.84.75. Its SSL certificate, issued by Google Trust Services, adds a veneer of legitimacy, though this alone is insufficient to verify trustworthiness. These factors collectively highlight the domain’s elevated risk profile and active threat status.

Users who visited hyperliquidex.xyz should immediately disconnect any connected wallets and revoke permissions through their wallet interface or dedicated tools like Revoke.cash. Scan devices for malware, as crypto drainers often bundle malicious payloads. For further verification, cross-check the domain against PhishDestroy’s blocklist and report the incident to raise community awareness. Always verify URLs manually and use bookmarks for trusted platforms to avoid similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2026-02-08 18:29:34
- Registrar: NameSilo, LLC
- IP: 84.32.84.75

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2d65c6c4-d895-43d2-81cf-3ac2737d8f32
- PhishDestroy: https://phishdestroy.io/domain/hyperliquidex.xyz/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquidex.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquidex.xyz/
Last updated: 2026-03-28