app[.]hyperliqdex[.]xyz

The domain app.hyperliqdex.xyz is a phishing site engaged in brand impersonation targeting Hyperliquid, a cryptocurrency platform. It presents itself as a legitimate Hyperliquid interface to deceive users into disclosing sensitive information or transferring digital assets. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, app.hyperliqdex.xyz has been taken offline.

Technical indicators confirm the elevated risk level. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker and SOCRadar. It appears on one security blocklist, specifically PhishDestroy. Registered through NameSilo, LLC on June 05, 2025, app.hyperliqdex.xyz resolves to the IP address 92.113.23.152, hosted by AS47583 Hostinger International Limited in Germany. The site lacks an SSL certificate, and its nameservers are hermes.dns-parking.com and artemis.dns-parking.com. The observed page title was 'Hyperliquid', reinforcing the brand impersonation.

Users who interacted with app.hyperliqdex.xyz should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to Hyperliquid’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.