hyperliquexchange[.]wixstudio[.]com

Analysis of hyperliquexchange.wixstudio.com indicates an active generic phishing operation. The domain was created on 17 December 2016 and is registered through the Wix Studio platform, which is commonly used for free‑hosting services. Infrastructure data shows the authoritative nameservers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, confirming the use of NS‑One’s DNS infrastructure.

The domain appears on one public security blocklist and is listed by PhishDestroy as a blocked phishing site. VirusTotal scans have returned detections from 11 of 91 security vendors, providing independent confirmation of malicious activity. No additional public indicators such as IP address reputation, SSL certificate details, or page title have been disclosed, leaving the full scope of the phishing campaign uncertain.

Defenders should add hyperliquexchange.wixstudio.com to URL filtering and DNS blocklists, monitor traffic to the associated NS‑One nameservers for anomalous patterns, and consider enforcing web‑gateway policies that inspect outbound connections to newly registered Wix‑hosted domains. Continuous re‑scanning with multi‑engine services is advised to capture any changes in vendor detection status. Organizations that rely on email or credential‑based services should remain vigilant for credential‑harvesting attempts that may use this domain as a lure.