# hyprliquid--exchange.pages.dev — SUSPICIOUS

> PhishDestroy identifies hyprliquid--exchange.pages.dev as a live Hyperliquid impersonation hosting a crypto drainer kit.

## Summary
PhishDestroy identifies hyprliquid--exchange.pages.dev as a brand-impersonation domain targeting Hyperliquid users with a suspected cryptocurrency drainer kit. The infrastructure is hosted on Cloudflare Pages and resolves to IP 188.114.96.3, which is currently associated with a Google Trust Services SSL certificate. No malicious payload signatures have been uploaded to VirusTotal as of the latest scan, leaving the site undetected by 95 engines.  This domain was flagged under seed 139116 with a VirusTotal detection score of 0/95, registered through Cloudflare, Inc., and currently carries a clean status on Google Safe Browsing. The site remains active and unlisted on major blocklists, maintaining a low public profile while posing a direct threat to Hyperliquid traders seeking liquidity solutions.  The risk remains ACTIVE and under investigation. Users are advised to avoid all connections to hyprliquid--exchange.pages.dev, verify Hyperliquid endpoints via official channels only, and report any encounter to PhishDestroy for takedown action. Blocking the IP 188.114.96.3 at the network perimeter is also recommended to mitigate potential exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Hyperliquid

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0e18285b-417f-4b54-a0d9-40ae3f1c8b89
- PhishDestroy: https://phishdestroy.io/domain/hyprliquid--exchange.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/hyprliquid--exchange.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/hyprliquid--exchange.pages.dev/
Last updated: 2026-04-12