site-9sm[.]pages[.]dev

This domain, site-9sm.pages.dev, poses a direct threat as a brand impersonation platform targeting Hyperliquid, a decentralized exchange and trading infrastructure. Analysis indicates the domain was designed to mimic the legitimate Hyperliquid interface, likely to deceive users into disclosing sensitive credentials or interacting with malicious smart contracts. The page title, 'Hyperliquid - Your Hub to the Hyperliquid Universe,' reinforces the deception by closely mirroring the branding and messaging of the authentic platform, increasing the likelihood of successful social engineering attacks against users familiar with the target brand.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports 7 out of 95 security vendors flagging site-9sm.pages.dev as malicious, a detection rate that exceeds typical thresholds for automated blocking systems. The domain was registered through Cloudflare, Inc. on March 24, 2026, and currently resolves to the IP address 188.114.97.3. Infrastructure analysis reveals the use of Cloudflare hosting and Google Trust Services for SSL certification, which are commonly leveraged to obscure the true origin of malicious content. Additionally, the domain appears on one security blocklist, and a trust score of 0/100 further corroborates its classification as high-risk.

Users who visited site-9sm.pages.dev should take immediate action to mitigate potential compromise. If credentials were entered, rotate all passwords associated with Hyperliquid or related financial accounts, and enable multi-factor authentication where available. Review recent transaction history for unauthorized activity, particularly in decentralized wallets or smart contract interactions. Clear browser caches and stored cookies to eliminate residual session data, and consider running a full system scan using updated security tools to detect any secondary payloads or malware. Monitor for phishing attempts via email or messaging platforms, as attackers may attempt follow-up campaigns using harvested contact details.