social-hyperliquid[.]pages[.]dev

PhishDestroy identifies a Hyperliquid brand impersonation phishing domain operating through social-hyperliquid.pages.dev. This fraudulent site masquerades as the legitimate Hyperliquid platform to trick users into revealing login credentials or transferring cryptocurrency. The threat level is classified as elevated due to the active impersonation of a well-known financial brand and the presence of a valid SSL certificate, which may lull visitors into a false sense of security. This domain was flagged by PhishDestroy’s automated analysis pipeline using seed 01b043. VirusTotal’s latest scan shows 1 out of 95 security vendors have detected this domain as malicious. The domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., with a Google Trust Services SSL certificate in place. The page employs the pages.dev subdomain under Cloudflare’s Pages service, a common tactic to appear legitimate at first glance. The registration and hosting infrastructure are designed to evade immediate suspicion while actively deceiving users. If you have visited social-hyperliquid.pages.dev, immediately check your Hyperliquid account for unauthorized activity. Change your password using a trusted device and enable two-factor authentication if not already active. Do not enter any credentials or financial information on this site. Report the domain to Hyperliquid’s official support channels and consider running a malware scan on your device. Use PhishDestroy’s full threat report to verify any suspicious links before interacting with them. Staying vigilant can prevent credential theft or financial loss.