hypersap-v3-en-cdn[.]pages[.]dev

This domain, hypersap-v3-en-cdn.pages.dev, operates as a fraudulent decentralized exchange (DEX) phishing site designed to steal cryptocurrency credentials and funds. The site mimics legitimate multi-chain swap platforms, presenting itself as 'Hyperswap v3 – Next-Gen DEX for Multi-Chain Crypto Swaps' to deceive users into connecting wallets or entering private keys. Such schemes typically harvest sensitive information or directly siphon assets through malicious smart contracts, posing a severe financial risk to visitors. Analysis indicates this infrastructure was registered on April 30, 2026, through Cloudflare, Inc., a provider frequently leveraged by threat actors to obscure origins. The domain resolves to the IP address 188.114.96.3, hosted in Canada under Cloudflare’s network. Only 1 of 95 security vendors on VirusTotal currently flags this domain, suggesting it remains under-detected despite its active malicious status. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of legitimacy while failing to validate the site’s true intent. If you visited hypersap-v3-en-cdn.pages.dev or interacted with its content, immediately disconnect any connected wallets and revoke all smart contract approvals via a blockchain explorer. Scan devices for malware using updated security tools, and monitor accounts for unauthorized transactions. Report the domain to relevant crypto security platforms and consider freezing compromised assets through your wallet provider. Never re-enter recovery phrases or private keys on unfamiliar sites, even if they appear professionally designed.