hyperappers[.]xyz

The domain hyperappers.xyz is a confirmed phishing site engaged in brand impersonation targeting PancakeSwap users. It presents itself as the legitimate PancakeSwap platform to deceive visitors into connecting their cryptocurrency wallets, enabling wallet_connect_phish scams designed to steal funds. As of the latest verification, hyperappers.xyz has been taken offline, though prior activity indicates an elevated risk for those who interacted with it.

Technical analysis reveals hyperappers.xyz was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, CyRadar, and Forcepoint ThreatSeeker. The domain appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com on October 29, 2025, it resolved to IP address 185.112.145.128, hosted by 1984 ehf (AS44925) in Iceland. The site lacked an SSL certificate, and its nameservers were ns0.1984.is, ns1.1984.is, ns1.1984hosting.com, ns2.1984.is, and ns2.1984hosting.com. The observed page title was 'Pancakeswap', reinforcing its attempt to mimic the legitimate platform.

Users who connected a wallet to hyperappers.xyz should immediately revoke all token approvals using a tool like revoke.cash or Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to PancakeSwap's official security channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.