hyperliquied-waleet-eng[.]pages[.]dev

This domain is flagged as a brand impersonation targeting Hyperliquid, a legitimate cryptocurrency platform. The domain hyperliquied-waleet-eng.pages.dev was created on April 2, 2026, and registered through Cloudflare, Inc. It resolves to IP 172.66.44.81, located in Canada and associated with Cloudflare, Inc. The page title is "Hyperliquid Wallet – Your Gateway to Secure Crypto," which closely mimics the branding of Hyperliquid. The domain is hosted on Cloudflare's nameservers (macy.ns.cloudflare.com and otto.ns.cloudflare.com) and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal reports 1 detection out of 94 security vendors, and the domain appears on one security blocklist (PhishDestroy). The Gridinsoft trust score is 0/100, indicating high risk. The HTTP status is 200, confirming the site is currently accessible. Analysis indicates this domain is actively impersonating Hyperliquid to deceive users. Defenders should block access to this domain and any subdomains, monitor for related domains using similar naming patterns, and warn users not to enter credentials or connect wallets. The exact content of the page has not been analyzed beyond the title, but the combination of a low trust score, brand impersonation classification, and recent registration date strongly suggests a phishing operation.