hl-dex-v3[.]app

PhishDestroy identifies the domain hl-dex-v3.app as an elevated-risk brand impersonation threat specifically targeting Discord users. The domain, now taken offline, was created on February 21, 2026, and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. Despite its offline status, the domain posed a significant risk by mimicking the Discord brand to deceive users into divulging sensitive credentials, with a page title of "Portfolio | Kinetiq" that likely served as a decoy.

Technical indicators for hl-dex-v3.app include a VirusTotal detection rate of 2 out of 95 security vendors flagging the domain as malicious, and its appearance on 4 security blocklists. The domain resolves to the IP address 172.67.129.41 and lacks an SSL certificate, further signaling its fraudulent nature. Notably, the domain is not listed on Google Safe Browsing (GSB), which may have contributed to its initial success in evading detection.

The current status of hl-dex-v3.app is offline, indicating that response actions such as takedown requests or registrar intervention have been effective. However, residual risk remains as similar domains may reappear under different names or IPs. Users who may have interacted with this domain should change their Discord passwords immediately and enable two-factor authentication. PhishDestroy recommends monitoring for any unauthorized account activity and reporting suspicious emails or links to the appropriate security teams.