# hyper-liquid-eng.pages.dev — SUSPICIOUS

> PhishDestroy uncovers hyper-liquid-eng.pages.dev impersonating Hyperliquid, linked to 0/95 VirusTotal detections. Do not enter credentials if prompted.

## Summary
A recently flagged domain, hyper-liquid-eng.pages.dev, has been observed posing as Hyperliquid in a suspected brand impersonation scheme. Threat intelligence indicates this page is actively leveraging the Hyperliquid brand to deceive users into divulging sensitive information or downloading malicious payloads. The domain’s registration details and low detection rate suggest it may still be in early operational stages, but should not be underestimated.  PhishDestroy identifies this domain as part of a low-profile but dangerous impersonation campaign. According to VirusTotal, hyper-liquid-eng.pages.dev currently shows 0 detections out of 95 scanning engines, indicating it has not yet been widely blacklisted. The site leverages a Google Trust Services SSL certificate and resolves to IP 172.66.47.129 via Cloudflare, Inc., making it appear legitimate at first glance. This tactic is commonly used by adversaries to build trust before deploying phishing lures or malware.  If you have visited hyper-liquid-eng.pages.dev or entered any information, cease all interaction with the site immediately. Disconnect from the network and run a full antivirus scan. If credentials were provided, change passwords on all related accounts, especially those tied to financial or crypto platforms like Hyperliquid. Report the domain to your IT team or cybersecurity provider with the seed e7ee8d for further investigation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.129

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/hyper-liquid-eng.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/hyper-liquid-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/hyper-liquid-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyper-liquid-eng.pages.dev/
Last updated: 2026-04-06