drop-hyperliquid[.]pages[.]dev

This domain, drop-hyperliquid.pages.dev, is flagged as a high-risk phishing site targeting cryptocurrency users. Analysis indicates it is designed to mimic the Hyperliquid platform, presenting a fake $DROP token page. Such sites typically aim to deceive visitors into connecting wallets or entering private keys, enabling attackers to drain funds from victims' crypto accounts. The page title explicitly displays $DROP | HYPERLIQUID, suggesting an attempt to exploit interest in new or trending tokens for fraudulent purposes. Infrastructure analysis reveals the domain is hosted on Cloudflare's network, resolving to the IP address 172.66.44.81 under AS13335. It appears on one security blocklist, and VirusTotal shows a detection rate of 1 out of 95 security vendors, indicating limited but confirmed malicious classification. The SSL certificate is issued by Google Trust Services (WE1), and the domain is registered through Cloudflare, Inc. The low detection count may reflect its recent deployment or evasion techniques, but the active status and targeted branding confirm its threat posture. Users who have visited drop-hyperliquid.pages.dev should immediately disconnect any connected wallets and revoke permissions for the site using a blockchain explorer or wallet management tool. Check transaction history for unauthorized transfers, especially those involving $DROP or Hyperliquid-related tokens. If credentials or private keys were entered, assume compromise and migrate funds to a new wallet. Monitor accounts for unusual activity and report the domain to relevant security platforms to aid in broader detection efforts. Given the domain's active status and high-risk classification, continued exposure poses a significant threat to digital assets.