hyperliquidexchange[.]us

The domain hyperliquidexchange.us is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'across'. It operates as a cryptocurrency scam, attempting to deceive users into interacting with fraudulent exchange services. As of the latest verification, hyperliquidexchange.us has been taken offline, though prior activity classified it as a high-risk threat under investigation for its role in cryptocurrency-related fraud.

Technical analysis of hyperliquidexchange.us reveals minimal detection at the time of assessment, with 0 of 95 VirusTotal vendors flagging the domain. It was registered through NameCheap, Inc. on July 01, 2025, and resolved to the IP address 106.0.62.69, hosted by A2 Hosting, Inc. in the United States. The domain appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Let's Encrypt (R13). Observed technologies included LiteSpeed, HSTS, and HTTP/3, while the page title displayed 'Hyper Liquid Exchange - Hyper Liquid Exchange'. No drainer kit was identified in this campaign.

Users who interacted with hyperliquidexchange.us should immediately revoke any token approvals granted to the site and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including the impersonated brand 'across', the registrar NameCheap, and security blocklists such as PhishDestroy. Victims may also file complaints with local cybercrime units or organizations like the FBI’s IC3 for further investigation.