dex-hyperliquid-en[.]wixstudio[.]com

This domain, dex-hyperliquid-en.wixstudio.com, poses a brand impersonation threat targeting users of Hyperliquid, a cryptocurrency platform. The site is designed to deceive visitors into believing they are interacting with the legitimate Hyperliquid service, potentially leading to unauthorized transactions, credential theft, or exposure to crypto drainer scripts. Infrastructure analysis reveals the domain was configured to mimic Hyperliquid’s branding, likely to exploit trust in the platform for malicious purposes.

Analysis indicates the domain has been flagged by 7 out of 95 security vendors on VirusTotal, confirming its malicious classification. It was registered through GoDaddy.com, LLC on December 17, 2016, though the subdomain impersonating Hyperliquid appears to be a more recent addition. The domain resolves to the IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate, which does not validate legitimacy but may create a false sense of security for visitors. The domain is also listed on one security blocklist, further corroborating its malicious intent.

If you visited dex-hyperliquid-en.wixstudio.com or interacted with its content, take immediate action to mitigate potential risks. Disconnect any connected wallets or sessions linked to the site and revoke permissions for any suspicious smart contracts. Scan your device for malware using updated security tools, and monitor financial accounts or crypto wallets for unauthorized transactions. Report the domain to relevant security teams or platforms to assist in broader threat mitigation efforts. Avoid re-engaging with the site, as it remains a confirmed threat despite its current offline status.