# hyperliquidvietnam.xyz — SUSPICIOUS

> hyperliquidvietnam.xyz impersonates Hyperliquid, created May 25, 2025. Zero VirusTotal detections. Avoid entering credentials or crypto assets.

## Summary
PhishDestroy identifies hyperliquidvietnam.xyz as an active brand impersonation domain targeting Hyperliquid users. The threat actor registered this domain through NAMECHEAP INC on May 25, 2025, and hosts it on IP 188.114.96.3 under a Google Trust Services SSL certificate. This domain is designed to deceive visitors into believing it is an official Hyperliquid platform, likely to harvest login credentials, API keys, or cryptocurrency assets through fake trading interfaces or support portals. Given its recent creation and low detection rate, this impersonation poses a high risk to users who may unknowingly interact with the malicious site.

Evidence supporting the investigation includes 0/95 detections on VirusTotal, indicating it has not yet been widely flagged by security vendors. The domain’s registration and hosting infrastructure, combined with the lack of broad detection, suggest it is either newly deployed or deliberately evading scrutiny. Users should remain cautious of recently registered domains mimicking Hyperliquid, as the absence of warnings does not guarantee safety.

If you visited hyperliquidvietnam.xyz or entered any credentials, immediately revoke API keys, change passwords, and review transaction history for unauthorized activity. Use official Hyperliquid domains (hyperliquid.xyz) and verify links via trusted sources. Report this domain to your security team or through platforms like PhishDestroy to aid in blocking. Avoid interacting with unknown domains claiming to be Hyperliquid to prevent credential theft or financial loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registered: 2025-05-25 04:42:32
- Registrar: NAMECHEAP INC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3b28bbe6-3ac9-42d2-af6e-9ef9f0035ad4
- PhishDestroy: https://phishdestroy.io/domain/hyperliquidvietnam.xyz/
- LLM endpoint: https://phishdestroy.io/domain/hyperliquidvietnam.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyperliquidvietnam.xyz/
Last updated: 2026-03-24