hyperxyz[.]trade

The domain hyperxyz.trade has been identified as a phishing site specializing in brand impersonation, specifically targeting Hyperliquid, a decentralized finance platform. Analysis indicates the site presents itself as an automated market making service under the title 'HyperXYZ — Automated Market Making · Hyperliquid,' designed to deceive users into engaging with fraudulent financial operations. The domain is currently offline, but prior activity warrants elevated scrutiny. Infrastructure analysis reveals the domain was registered through NAMECHEAP INC on March 14, 2026, and resolved to the IP address 13.112.212.143. Detection metrics indicate the domain was flagged by 3 of 95 security vendors on VirusTotal, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist and was actively blocked by at least one threat intelligence provider. Technologies detected on the site include Nginx and HTTP Strict Transport Security (HSTS), suggesting an attempt to mimic legitimate security practices. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain and associated IP address 13.112.212.143 at the network level. Users should verify the authenticity of any financial or trading platform by cross-referencing official domains and avoiding engagement with unsolicited or untrusted sources. Monitoring for similar impersonation attempts targeting decentralized finance platforms is recommended.